CVE-2026-67966

creationtimestamp| type| source ---|---|--- 2026-08-18 16:20:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtemogtjn42f...

CVE-2026-67966

Tenda W20E V16.01.0.62782 /goform/telnet endpoint allows unauthenticated remote attackers to activate the Telnet daemon and obtain root shell access...

CVE-2026-67966

The Tenda W20E V5.0 router (firmware V16.01.0.6(2782)) exposes /goform/telnet, which unconditionally starts telnetd and opens port 23 to the WAN, granting an unauthenticated, passwordless root shell. The flaw stems from manufacturing-test code retained in production firmware. No fix is available;...