CVE Catalog
CVE-2026-67965
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk0.21%
11th percentile - higher than 11% of all known CVEs
Summary
An issue in Tenda W20E v.16.01.0.6(2782) allows a remote attacker to execute arbitrary code via the url_need_login function.
Risk Assessment
A remote attacker can execute arbitrary code on the device, potentially leading to full compromise of the router and interception of network traffic.
Recommendation
Immediately update the Tenda W20E firmware if a newer version is available, and monitor vendor advisories.
Original NVD description (English source)
An issue in Tneda W20E v.16.01.0.6(2782) allows a remote attacker to execute arbitrary code via the url_need_login function