Vulnerability Details CVE-2026-27511
Shenzhen Tenda F3 Wireless Router firmware V12.01.01.55_multi contains a clickjacking vulnerability in the web-based administrative interface. The interface does not set the X-Frame-Options header, allowing attacker-controlled sites to embed administrative pages in an iframe and trick an authenticated administrator into unintended interactions that may result in unauthorized configuration changes.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 13.0%
CVSS Severity
CVSS v3 Score 4.3
References
Products affected by CVE-2026-27511
-
cpe:2.3:h:tenda:f3:-
-
cpe:2.3:o:tenda:f3_firmware:12.01.01.48