CVE-2026-36539

Netis AC1200 Router NC21 V4.0.1.4296 exposes a CGI endpoint /cgi-bin/skkget.cgi that returns the entire router configuration as a JSON response with no authentication required. Any attacker on the LAN can send a single HTTP GET request and instantly retrieve administrator credentials, WiFi...

CVE-2022-40847

In Tenda AC1200 Router model W15Ev2 V15.11.0.101576, there exists a command injection vulnerability in the function formSetFixTools. This vulnerability allows attackers to run arbitrary commands on the server via the hostname parameter...

CVE-2020-28093: Undefined Security Weakness

On Tenda AC1200 Model AC6 15.03.06.51multi devices, admin, support, user, and nobody have a password of 1234...

CVE-2020-28094: Undefined Security Weakness

On Tenda AC1200 Model AC6 15.03.06.51multi devices, the default settings for the router speed test contain links to download malware named elive or CNKI E-Learning...

PT-2020-16924

Name of the Vulnerable Software and Affected Versions Tenda AC1200 Model AC6 version 15.03.06.51 multi Description The issue concerns devices with default passwords for admin, support, user, and nobody accounts, which are all set to 1234. Recommendations For Tenda AC1200 Model AC6 version...

PT-2020-16925

Name of the Vulnerable Software and Affected Versions Tenda AC1200 Model AC6 version 15.03.06.51 multi Description The default settings for the router speed test on the affected device contain links to download malware named elive or CNKI E-Learning. Recommendations For Tenda AC1200 Model AC6...