Live › vulnerability › CVE-2026-115797
Go to dashboardThe Tenda F6 web management interface, version 12.02.01.73, transmits the ecos_pw argument in cleartext. An attacker positioned to observe or manipulate traffic could capture the router admin password.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Owners of Tenda F6 routers running firmware 12.02.01.73 who use the web management interface. Exposure depends on whether an attacker can reach the traffic path, which the sources do not describe in detail. Devices with the web interface disabled or limited to a trusted network are less exposed.
No product ranges from the sources yet.
12.02.01.73Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A weakness has been identified in Tenda F6 12.02.01.73. Affected is an unknown function of the component Web Management Interface. Executing a manipulation of the argument ecos_pw can lead to cleartext transmission of sensitive information. The attack may be launched remotely. This attack is characterized by high complexity. The exploitability is told to be difficult. The exploit has been made available to the public and could be used for attacks.
This page as .md · .json · in your agent: get_signal("CVE-2026-115797")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.