CVE-2026-115797 Tenda F6 Web Management cleartext transmission

A weakness has been identified in Tenda F6 12.02.01.73. Affected is an unknown function of the component Web Management Interface. Executing a manipulation of the argument ecospw can lead to cleartext transmission of sensitive information. The attack may be launched remotely. This attack is...

CVE-2026-115797

A weakness in the Web Management Interface of Tenda F6 (version 12.02.01.73) allows for the cleartext transmission of sensitive information . By manipulating the ecos_pw argument, an attacker can trigger this exposure. The attack is launched remotely and is characterized by high complexity with d...

EUVD-2026-109146

A weakness has been identified in Tenda F6 12.02.01.73. Affected is an unknown function of the component Web Management Interface. Executing a manipulation of the argument ecospw can lead to cleartext transmission of sensitive information. The attack may be launched remotely. This attack is...

CVE-2026-115797 Tenda F6 Web Management cleartext transmission

A weakness has been identified in Tenda F6 12.02.01.73. Affected is an unknown function of the component Web Management Interface. Executing a manipulation of the argument ecospw can lead to cleartext transmission of sensitive information. The attack may be launched remotely. This attack is...

EUVD-2026-109132

A security flaw has been discovered in Tenda F6 12.02.01.73. This impacts an unknown function of the component Web Management Interface. Performing a manipulation results in cross-site request forgery. The attack may be initiated remotely. The exploit has been released to the public and may be us...

CVE-2026-115796 Tenda F6 Web Management cross-site request forgery

A security flaw has been discovered in Tenda F6 12.02.01.73. This impacts an unknown function of the component Web Management Interface. Performing a manipulation results in cross-site request forgery. The attack may be initiated remotely. The exploit has been released to the public and may be us...

CVE-2026-115796

A security flaw exists in the Web Management Interface of the Tenda F6 (version 12.02.01.73 ), leading to a cross-site request forgery (CSRF) . An attacker can initiate this attack remotely by manipulating an unknown function within the interface. The vulnerability involves a missing authorizatio...

CVE-2026-115796 Tenda F6 Web Management cross-site request forgery

A security flaw has been discovered in Tenda F6 12.02.01.73. This impacts an unknown function of the component Web Management Interface. Performing a manipulation results in cross-site request forgery. The attack may be initiated remotely. The exploit has been released to the public and may be us...

EUVD-2026-108545

Authentication tokens issued by the E3's web management interface on login are given an expiration time far beyond any reasonable session lifetime, effectively making them non-expiring. A token obtained through interception or device compromise remains valid for authenticated access for an extend...

PT-2026-122209

A weakness has been identified in Tenda F6 12.02.01.73. Affected is an unknown function of the component Web Management Interface. Executing a manipulation of the argument ecos pw can lead to cleartext transmission of sensitive information. The attack may be launched remotely. This attack is...

Tenda f6 encryption issue vulnerability

The Tenda f6 running version 12.02.01.73 contains an encryption vulnerability. This vulnerability stems from improper handling of the ecospw parameter in the Web Management Interface component, potentially leading to the transmission of sensitive information in plain text...

Tenda f6 cross-site request forgery vulnerability

The Tenda f6 running version 12.02.01.73 contains a security vulnerability stemming from improper handling of unknown functions within the Web Management Interface component; this makes it susceptible to cross-site request forgery attacks...

PT-2026-122208

A security flaw has been discovered in Tenda F6 12.02.01.73. This impacts an unknown function of the component Web Management Interface. Performing a manipulation results in cross-site request forgery. The attack may be initiated remotely. The exploit has been released to the public and may be us...

CVE-2026-96616

Authentication tokens issued by the E3's web management interface on login are given an expiration time far beyond any reasonable session lifetime, effectively making them non-expiring. A token obtained through interception or device compromise remains valid for authenticated access for an extend...

CVE-2026-96616

The Kiloview E3 NDI Encoder is vulnerable to Insufficient Session Expiration (CWE-613) within its web management interface. The root cause is that authentication tokens issued upon login are configured with an expiration time so extended that they effectively become non-expiring . If an attacker ...

CVE-2026-96616 Kiloview E3 NDI Encoder Insufficient Session Expiration

Authentication tokens issued by the E3's web management interface on login are given an expiration time far beyond any reasonable session lifetime, effectively making them non-expiring. A token obtained through interception or device compromise remains valid for authenticated access for an extend...

CVE-2026-96616 Kiloview E3 NDI Encoder Insufficient Session Expiration

Authentication tokens issued by the E3's web management interface on login are given an expiration time far beyond any reasonable session lifetime, effectively making them non-expiring. A token obtained through interception or device compromise remains valid for authenticated access for an extend...

CVE-2026-95721

A memory corruption vulnerability exists in the web-based management interface of AOS-8. Successful exploitation could allow an authenticated low privilege attacker with local access to view some system files and interrupt the normal operation of the affected service...

CVE-2026-95717

A stored cross-site scripting XSS vulnerability exists in the web-based management interface of AOS that could allow an authenticated remote attacker with high privileges to inject malicious scripts. Successful exploitation could allow an attacker to execute arbitrary script code in the context o...

CVE-2026-95704

A vulnerability in the web-based management interface of wireless network management systems could allow an authenticated remote attacker to execute remote code. Successful exploitation could enable an attacker to execute arbitrary commands on the underlying operating system, potentially...