Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A security vulnerability has been detected in Tenda AC6 15.03.06.23. Affected by this issue is the function get_log_file of the file /goform/getLogFile of the component httpd. The manipulation of the argument wans.flag leads to os command injection. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 2 products
CVE-2026-8265 A security vulnerability has been detected in Tenda AC6 15.03.06.23. Affected by this issue is the function get_log_file of the file /goform/getLogFile of the component… https://www.cve.org/CVERecord?id=CVE-2026-8265
Post summary
The text identifies a CVE and notes the affected function in a router firmware but provides no further technical detail, exploitation evidence, or remediation steps.
CVE-2026-8265 OS Command Injection in Tenda AC6 15.03.06.23 getLogFile Function https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-8265 Vulnerability Alert Subscriptions: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=1
Post summary
The post announces a new OS command injection vulnerability in the Tenda AC6 firmware, detailing the affected function and version but providing no evidence of exploitation, PoC, patches, or false positives.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | tenda | ac6 | 2.0 | - | - |
| OS | tenda | ac6_firmware | 15.03.06.23 | - | - |