CVE-2026-86300
Tenda AC9 Web Management R7WebsSecurityHandler improper authentication
CVSS Score
7.3
EPSS Score
0.0%
EPSS Percentile
0th
A flaw has been found in Tenda AC9 15.03.05.14. This impacts the function R7WebsSecurityHandler of the component Web Management. This manipulation causes improper authentication. The attack may be initiated remotely. The exploit has been published and may be used.
| CWE | CWE-287 |
| Vendor | tenda |
| Product | ac9 |
| Published | Sep 7, 2026 |
| Last Updated | Sep 8, 2026 |
Stay Ahead of the Next One
Get instant alerts for tenda ac9
Be the first to know when new high vulnerabilities affecting tenda ac9 are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
Tenda / AC9
15.03.05.14
References
vuldb.com: https://vuldb.com/vuln/399464 vuldb.com: https://vuldb.com/vuln/399464/cti vuldb.com: https://vuldb.com/cve/CVE-2026-86300 vuldb.com: https://vuldb.com/submit/906606 vuldb.com: https://vuldb.com/submit/906607 vuldb.com: https://vuldb.com/submit/906608 github.com: https://github.com/limou89/somevul/blob/main/Tenda_AC9_getProduct_Info_Disclosure.md github.com: https://github.com/limou89/somevul/blob/main/Tenda_AC9_fast_setting_wifi_set_Unauth_Password.md tenda.com.cn: https://www.tenda.com.cn/
Credits
🔍 sleep (VulDB User)