CVE-2026-129258

Name of the Vulnerable Software and Affected Versions Tenda AC18 versions 15.03.05.05 multi through 15.03.05.19 Build 6318

Description A flaw exists in the Firmware Upgrade Handler component within the '/cgi-bin/upgrade' endpoint. The issue stems from insufficient verification of data authenticity when processing the upgradeFile argument, which allows a remote attacker to manipulate the upgrade process.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.