Dashboard / CVE-2026-7469

CVE-2026-7469

LOW
INFO Priority: 0.03 BB Relevance: 54/100
Published: 2026-04-30 Modified: 2026-10-26 First seen: 2026-10-29 Status: active

Attack Surface

Network Low Complexity No Interaction

CVSS Vector Breakdown

AV: Network
AC: Low
PR: Low
UI: None
S: X
AT: None
VC: Low
VI: Low
VA: Low

Description

A vulnerability was detected in Tenda 4G300 US_4G300V1.0Mt_V1.01.42_CN_TDC01. This impacts the function sub_425A28 of the file /goform/DelFil. The manipulation of the argument delflag results in command injection. The attack may be launched remotely. The exploit is now public and may be used.

Weakness Classification (2)

Affected Software (1)

VendorProductVersion
tenda 4g300_firmware 1.01.42_cn_tdc01

References & Advisories (5)

https://vuldb.com/submit/804268
Third Party Advisory VDB Entry
https://vuldb.com/vuln/360205
Third Party Advisory VDB Entry
https://vuldb.com/vuln/360205/cti
Permissions Required VDB Entry

Bug Bounty Relevance

54 / 100
✓ Network accessible
✓ Low complexity
✓ No user interaction

CVSS Score

2.1 / 10.0 v4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS — Exploitation Probability

1.42%
Raw Score 0.014180
Percentile 72.7%
Date 2026-10-29

EPSS Trend

2026-10-29
0.01418
2026-10-28
0.01418

Intelligence Sources

nvd ref →

External Links