CVE-2026-6989

published 2026-04-25

CVE-2026-6989: A vulnerability has been found in Tenda F453 up to 1.0.0.3. Impacted is the function TendaTelnet of the file /goform/telnet of the component Telnet Service…

low 2.1 CVSS 4.0

AV N AC L AT N PR L UI N VC L VI L VA L SC N SI N SA N E P CR X IR X AR X MAV X MAC X MAT X MPR X MUI X MVC X MVI X MVA X MSC X MSI X MSA X S X AU X R X V X RE X U X

A vulnerability has been found in Tenda F453 up to 1.0.0.3. Impacted is the function TendaTelnet of the file /goform/telnet of the component Telnet Service. Such manipulation leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
tenda	f453	—	—
tenda	f453	—	—
tenda	f453	—	—
tenda	f453	—	—
tenda	f453_firmware	—	—

CWE-74 CWE-77