Dashboard / CVE-2026-6989

CVE-2026-6989

LOW
INFO Priority: 0.07 BB Relevance: 55/100
Published: 2026-04-25 Modified: 2026-10-26 First seen: 2026-10-29 Status: active

Attack Surface

Network Low Complexity No Interaction

CVSS Vector Breakdown

AV: Network
AC: Low
PR: Low
UI: None
S: X
AT: None
VC: Low
VI: Low
VA: Low

Description

A vulnerability has been found in Tenda F453 up to 1.0.0.3. Impacted is the function TendaTelnet of the file /goform/telnet of the component Telnet Service. Such manipulation leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Weakness Classification (2)

Affected Software (1)

VendorProductVersion
tenda f453_firmware 1.0.0.3

References & Advisories (5)

https://vuldb.com/submit/796560
Third Party Advisory VDB Entry
https://vuldb.com/vuln/359541
Third Party Advisory VDB Entry
https://vuldb.com/vuln/359541/cti
Permissions Required VDB Entry
https://github.com/alc9700jmo/CVE/issues/24
Exploit Issue Tracking Third Party Advisory

Bug Bounty Relevance

55 / 100
✓ Network accessible
✓ Low complexity
✓ No user interaction

CVSS Score

2.1 / 10.0 v4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS — Exploitation Probability

3.18%
Raw Score 0.031820
Percentile 88.0%
Date 2026-10-29

EPSS Trend

2026-10-29
0.03182
2026-10-28
0.03182

Intelligence Sources

nvd ref →

External Links