VulnSocial

CVE-2026-82695Disclosure

LOWCVSS 9.3 · CRITICAL

Exploitation ongoing with high activity in latest observed window (1 mentions)

Immediate actions

  • Prioritize remediation for affected systems immediately
  • Assume compromise if assets are exposed
  • Track advisory updates for patch or workaround availability

Recommended action window: Immediate (within 24h)

NVD description

A security flaw has been discovered in Tenda AC18 15.03.05.19. Impacted is an unknown function of the file /goform/telnet of the component Telnet Handler. The manipulation results in missing authentication. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks.

Back to dashboard
3.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-287CWE-306

Priority

LOW

Exploitation

ACTIVE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

  • Active exploitation appears in 1 classified signals
  • 3 mentions across 3 observed days
  • Momentum state: stable

What's happening

  • Active exploitation reported across 1 signal
  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • Peaked 2d ago at 1 mentions (2026-08-31); latest day: 1
  • 3 total mentions across 3 days

Deep dive

Activity timeline3 mentions / 3d
00111Mentions · 2026-08-31: 1Mentions · 2026-09-01: 1Mentions · 2026-09-02: 1Active Exploitation · 2026-08-31: 1Technical Details · 2026-09-01: 1Technical Details · 2026-09-02: 108-3109-0109-02
Signal classification2 categories
Disclosure
266.7%
Active Exploitation
133.3%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-08-311
Active Exploitation1
2026-09-011
Disclosure1
2026-09-021
Disclosure1
Full discourse3 posts
  • SecAlerts@SecAlertsCo
    Disclosure

    📡 Tenda AC18 exposes its Telnet handler with zero authentication. CVE-2026-82695 targets /goform/telnet, no credentials needed, network accessible, CVSS 9.3. If it's on your network, treat it as compromised. #cybersecurity #ciso #vulnerabilities #mssp https://secalerts.co/vulnerability/CVE-2026-82695?utm_campaign=x https://t.co/8tHFHV24Bi

    Post summary

    The tweet announces a zero‑authentication Telnet flaw in the Tenda AC18 (CVE-2026-82695) with a high CVSS score, but it does not provide PoC, exploit code, or evidence of active exploitation.

    000001.9K
    887 followersView on X
  • Cybersecurity News DE@cybsecuritynews
    Disclosure

    #schwachstellen Zwei kritische Tenda-Lücken öffnen Telnet ohne Anmeldung #ac1206 #ac18 #cve202682693 #cve202682695 #telnet #tenda https://cybersecurity-news.de/tenda-telnet-luecke-cve-2026-82693-cve-2026-82695

    Post summary

    Two critical Tenda router vulnerabilities, CVE-2026-82693 and CVE-2026-82695, allow attackers to gain Telnet access without authentication.

    0000025
    10 followersView on X
  • VulDB 🛡@vuldb
    Active Exploitation

    Attention, elevated activities detected targeting Tenda AC18 (CVE-2026-82695) https://vuldb.com/vuln/397183/cti

    Post summary

    The text reports that the CVE-2026-82695 affecting Tenda AC18 is currently being exploited, with elevated suspicious activity observed. No resolution or technical details are provided.

    00000121
    2.3K followersView on X

Explore more

Back to dashboard