CVE-2026-27513

Published: Feb 23, 2026

Modified: May 11, 2026

PUBLISHED

CVSS v3.1

4.3

MEDIUM

Description

Shenzhen Tenda F3 Wireless Router firmware V12.01.01.55_multi contains a cross-site request forgery (CSRF) vulnerability in the web-based administrative interface. The interface does not implement anti-CSRF protections, allowing an attacker to induce an authenticated administrator to submit state-changing requests, which can result in unauthorized configuration changes.

Vendor	Product	Versions
Shenzhen Tenda Technology Co., Ltd.	Tenda F3	affected `0 - <= 12.01.01.55_multi`

Weaknesses (CWE)

CWE-352

CVSS v3.1 Details

CVSS v3.1 Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

None

Integrity

Low

Availability

None

References

https://www.tendacn.com/product/F3

product

https://www.vulncheck.com/advisories/tenda-f3-csrf-in-web-management-interface

third-party-advisory

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2026-27513

Description

Affected Products

Weaknesses (CWE)

CVSS v3.1 Details

References