← CVE Intelligence

CVE-2026-2148

Tenda AC21 Web Management DownloadFlash information disclosure PUBLISHED

Description (CNA)

A security vulnerability has been detected in Tenda AC21 16.03.08.16. Affected is an unknown function of the file /cgi-bin/DownloadFlash of the component Web Management Interface. The manipulation leads to information disclosure. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used.

Affected (CNA)

Vendor / productVersions
Tenda / AC21affected 16.03.08.16

CWE

CWE-200, CWE-284

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.