Tenda AC21 Web Management DownloadFlash information disclosure_CVE-2026-2148

6.9 / 10

MEDIUM

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P

Description

A security vulnerability has been detected in Tenda AC21 16.03.08.16. Affected is an unknown function of the file /cgi-bin/DownloadFlash of the component Web Management Interface. The manipulation leads to information disclosure. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used.

Basic Information

ID CVE-2026-2148

Source VulDB

Published Feb 8, 2026 at 10:32

Affected Product

Vendor Tenda

Product AC21

Version 16.03.08.16

Affected Versions Tenda AC21 16.03.08.16

CWE Classification

CWE-200 CWE-284

References

{
    "lastseen": "",
    "description": "A security vulnerability has been detected in Tenda AC21 16.03.08.16. Affected is an unknown function of the file /cgi-bin/DownloadFlash of the component Web Management Interface. The manipulation leads to information disclosure. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used.",
    "published": "2026-02-08T10:32:08.524Z",
    "modified": "2026-02-08T10:32:08.524Z",
    "type": "cve",
    "title": "Tenda AC21 Web Management DownloadFlash information disclosure",
    "source": "VulDB",
    "references": "https://vuldb.com/?id.344850\nhttps://vuldb.com/?ctiid.344850\nhttps://vuldb.com/?submit.747557\nhttps://github.com/master-abc/cve/issues/27\nhttps://www.tenda.com.cn/",
    "id": "CVE-2026-2148",
    "bulletinFamily": "",
    "cwe": [
        "CWE-200",
        "CWE-284"
    ],
    "cvelist": null,
    "sourceData": "Tenda AC21 16.03.08.16",
    "sourceHref": "",
    "cvss": {
        "score": 6.9,
        "severity": "MEDIUM",
        "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P",
        "version": "4.0"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "AC21",
    "version": "16.03.08.16",
    "vendor": "Tenda",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}