Vulnerability Details CVE-2026-27511
Shenzhen Tenda F3 Wireless Router firmware V12.01.01.55_multi contains a clickjacking vulnerability in the web-based administrative interface. The interface does not set the X-Frame-Options header, allowing attacker-controlled sites to embed administrative pages in an iframe and trick an authenticated administrator into unintended interactions that may result in unauthorized configuration changes.
Exploit prediction scoring system (EPSS) score
CVSS Severity
CVSS v3 Score 4.3
References
Products affected by CVE-2026-27511
-
cpe:2.3:h:tenda:f3:-
-
cpe:2.3:o:tenda:f3_firmware:12.01.01.48