CVE-2026-2147

CWE-200 — Information ExposureCWE-284 — Improper Access Control3 documents3 sources
Severity
5.5MEDIUM
EPSS
0.0%
top 94.66%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Tenda Ac21Tenda Ac21 Firmware
Timeline
PublishedFeb 8

Description

A weakness has been identified in Tenda AC21 16.03.08.16. This impacts an unknown function of the file /cgi-bin/DownloadLog of the component Web Management Interface. Executing a manipulation can lead to information disclosure. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Affected Packages2 packages

▶CVEListV5tenda/ac2116.03.08.16
▶NVDtenda/ac21_firmware16.03.08.16

🔴Vulnerability Details

2
CVEList
Tenda AC21 Web Management DownloadLog information disclosure↗2026-02-08
▶
GHSA
GHSA-qg34-2w8p-vh8q: A weakness has been identified in Tenda AC21 16↗2026-02-08
▶