Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.1
CVE-2026-27513: Tenda F3 Wireless Router Firmware: Admin Interface Hack Risk
CVE-2026-27513 · published 8 months ago
Summary
The Tenda F3 Wireless Router's web interface is not secure, allowing a hacker to trick an administrator into making unauthorized changes to the router's settings. This could lead to a security breach or disruptions to your network. Upgrade to a secure version of the firmware to fix this issue.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| tenda | f3_firmware |
<= 12.01.01.55_multi cpe:2.3:o:tenda:f3_firmware:*:*:*:*:*:*:*:* |
Original advisory text
Shenzhen Tenda F3 Wireless Router firmware V12.01.01.55_multi contains a cross-site request forgery (CSRF) vulnerability in the web-based administrative interface. The interface does not implement ...
Shenzhen Tenda F3 Wireless Router firmware V12.01.01.55_multi contains a cross-site request forgery (CSRF) vulnerability in the web-based administrative interface. The interface does not implement anti-CSRF protections, allowing an attacker to induce an authenticated administrator to submit state-changing requests, which can result in unauthorized configuration changes.
References
- https://www.tendacn.com/product/F3 Product
- https://www.vulncheck.com/advisories/tenda-f3-csrf-in-web-management-interface Third Party Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Type
CWE-352Cross-Site Request Forgery (CSRF)
Timeline
Published23 Feb 2026
Updated26 Oct 2026
First seen6 Mar 2026
Sources
CVE-2026-27513 · NVD
Track software like this
Free during beta