CVE Catalog
CVE-2026-67966
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk0.19%
9th percentile - higher than 9% of all known CVEs
Summary
The /goform/telnet endpoint in Tenda W20E V16.01.0.6(2782) allows unauthenticated remote attackers to activate the Telnet daemon and obtain root shell access.
Risk Assessment
An unauthenticated attacker can gain full control of the device, potentially leading to traffic interception and further network attacks.
Recommendation
Immediately disable Telnet if not in use, and update the Tenda W20E firmware.
Original NVD description (English source)
Tenda W20E V16.01.0.6(2782) /goform/telnet endpoint allows unauthenticated remote attackers to activate the Telnet daemon and obtain root shell access.