VulnSocial

CVE-2026-82693Disclosure

LOWCVSS 9.3 · CRITICAL

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

  • Prioritize remediation for affected systems immediately
  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft
  • Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

NVD description

A vulnerability was determined in Tenda AC1206 15.03.06.23. This vulnerability affects the function TendaTelnet of the file /goform/telnet of the component Web UI. Executing a manipulation can lead to missing authentication. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized.

Back to dashboard
3.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-287CWE-306

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Threat summary

  • Public PoC and exploit tooling are both present
  • 3 mentions across 3 observed days
  • Momentum state: stable

What's happening

  • Exploit tool or code specified in 1 signal
  • PoC mentioned or linked in 1 signal
  • Technical details provided in 3 signals
  • Disclosure: 1 classified signal
  • General: 1 classified signal
  • Peaked 2d ago at 1 mentions (2026-08-31); latest day: 1
  • 3 total mentions across 3 days

Deep dive

Activity timeline3 mentions / 3d
00111Mentions · 2026-08-31: 1Mentions · 2026-09-01: 1Mentions · 2026-09-05: 1PoC Mentioned / Linked · 2026-09-05: 1Exploit Tool / Code · 2026-09-05: 1Technical Details · 2026-08-31: 1Technical Details · 2026-09-01: 1Technical Details · 2026-09-05: 108-3109-0109-05
Signal classification3 categories
Disclosure
133.3%
General
133.3%
PoC
133.3%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-08-311
Disclosure1
2026-09-011
General1
2026-09-051
PoC1
Full discourse3 posts
  • SecAlerts@SecAlertsCo
    PoC

    📡 PoC exists for CVE-2026-82693 in Tenda AC1206. The TendaTelnet function at /goform/telnet requires zero auth, enabling full device takeover. CVSS 9.3 critical. Check your network gear. #cybersecurity #vulnerabilities #ciso #msp https://secalerts.co/vulnerability/CVE-2026-82693?utm_campaign=x https://t.co/3aCDrGOKGj

    Post summary

    A Proof‑of‑Concept for CVE‑2026‑82693 demonstrates a zero‑authentication Telnet vulnerability in the Tenda AC1206, rated CVSS‑9.3, enabling full device control.

    00000112
    889 followersView on X
  • Cybersecurity News DE@cybsecuritynews
    General

    #schwachstellen Zwei kritische Tenda-Lücken öffnen Telnet ohne Anmeldung #ac1206 #ac18 #cve202682693 #cve202682695 #telnet #tenda https://cybersecurity-news.de/tenda-telnet-luecke-cve-2026-82693-cve-2026-82695

    Post summary

    The text reports two critical Tenda CVEs that allow unauthenticated access via Telnet, but it provides no proof of concept, exploitation specifics, patch details, or evidence of active exploitation.

    0000025
    10 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-82693 A vulnerability was determined in Tenda AC1206 15.03.06.23. This vulnerability affects the function TendaTelnet of the file /goform/telnet of the component Web UI. Ex… https://www.cve.org/CVERecord?id=CVE-2026-82693

    Post summary

    The post is a straightforward disclosure of CVE-2026-82693, indicating a weakness in Tenda AC1206’s web‑UI Telnet handler.

    000001.4K
    58.0K followersView on X

Explore more

Back to dashboard