CVE-2026-27511

MEDIUM

4.3

Descripcion

Shenzhen Tenda F3 Wireless Router firmware V12.01.01.55_multi contains a clickjacking vulnerability in the web-based administrative interface. The interface does not set the X-Frame-Options header, allowing attacker-controlled sites to embed administrative pages in an iframe and trick an authenticated administrator into unintended interactions that may result in unauthorized configuration changes.

Detalles CVE

Puntuacion CVSS v3.14.3

SeveridadMEDIUM

Vector CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Vector de ataqueNETWORK

ComplejidadLOW

Privilegios requeridosNONE

Interaccion usuarioREQUIRED

Publicado2/23/2026

Ultima modificacion2/23/2026

Fuentenvd

Avistamientos honeypot0

Productos afectados

tenda:f3tenda:f3_firmware

Debilidades (CWE)

CWE-1021

Referencias

https://www.tendacn.com/product/F3(disclosure@vulncheck.com)

https://www.vulncheck.com/advisories/tenda-f3-clickjacking-in-web-management-interface(disclosure@vulncheck.com)

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.