Vulnerability Details CVE-2026-27513
Shenzhen Tenda F3 Wireless Router firmware V12.01.01.55_multi contains a cross-site request forgery (CSRF) vulnerability in the web-based administrative interface. The interface does not implement anti-CSRF protections, allowing an attacker to induce an authenticated administrator to submit state-changing requests, which can result in unauthorized configuration changes.
Exploit prediction scoring system (EPSS) score
CVSS Severity
CVSS v3 Score 4.3
References
Products affected by CVE-2026-27513
-
cpe:2.3:h:tenda:f3:-
-
cpe:2.3:o:tenda:f3_firmware:12.01.01.48