CVE-2026-129258 | Tenda AC18 15.03.05.05_multi/15.03.05.19 Build 6318 Firmware Upgrade /cgi-bin/upgrade upgradeFile data authenticity

A vulnerability was found in Tenda AC18 15.03.05.05_multi/15.03.05.19 Build 6318 and classified as very critical. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/upgrade of the component Firmware Upgrade Handler. Such manipulation of the argument upgradeFile leads to insufficient verification of data authenticity.

This vulnerability is traded as CVE-2026-129258. The attack may be launched remotely. Furthermore, there is an exploit available.VulDB Recent EntriesRead More