Exploitation ongoing with high activity in latest observed window (1 mentions)
Recommended action window: Immediate (within 24h)
NVD description
A vulnerability has been found in Tenda F453 up to 1.0.0.3. Impacted is the function TendaTelnet of the file /goform/telnet of the component Telnet Service. Such manipulation leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Priority
MEDIUM
Exploitation
ACTIVE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 2 products
| Date | Total | Labels |
|---|
| 2026-04-25 | 1 | General1 |
| 2026-04-26 | 1 | Active Exploitation1 |
Tenda F453 CVE-2026-6989 is under active exploitation—attackers can inject commands via Telnet, gaining full control. With a CVSS score of 9.8, patch now or risk widespread compromise. #NerdieNews #CyberSecurity #InfoSec #ThreatIntel #APT #Microsoft https://t.co/Yb9cIlwQfk
Post summary
The post indicates that CVE-2026-6989 is actively exploited via Telnet command injection with a high CVSS score, urging immediate patching.
CVE-2026-6989 A vulnerability has been found in Tenda F453 up to 1.0.0.3. Impacted is the function TendaTelnet of the file /goform/telnet of the component Telnet Service. Such manipu… https://www.cve.org/CVERecord?id=CVE-2026-6989
Post summary
A CVE‑2026‑6989 vulnerability was reported in the Tenda F453 router’s Telnet service, with minimal technical details provided. No proof‑of‑concept, exploit code, patch, or active exploitation evidence is mentioned.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | tenda | f453 | - | - | - |
| OS | tenda | f453_firmware | 1.0.0.3 | - | - |