EUVD-2026-68509
GHSA-q8vr-4mj7-wm6v
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Unauthenticated network request to /goform/telnet bypasses auth (PR:N, AC:L) and yields root shell, giving full C/I/A; impact stays on the router so S:U.
Primary rating from Vendor (VulDB).
CVSS VectorVendor: VulDB
Lifecycle Timeline
6DescriptionCVE.org
A security flaw has been discovered in Tenda AC18 15.03.05.19. Impacted is an unknown function of the file /goform/telnet of the component Telnet Handler. The manipulation results in missing authentication. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks.
AnalysisAI
Missing authentication on the Telnet Handler of the Tenda AC18 router (firmware 15.03.05.19) lets remote, unauthenticated attackers reach the /goform/telnet endpoint and enable/access a telnet service without credentials, exposing full device control. Publicly available exploit code exists, and with a CVSS 4.0 base of 9.3 the flaw grants complete confidentiality, integrity, and availability impact over the network. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires network reachability to the Tenda AC18 web management service and the ability to send a request to the /goform/telnet Telnet Handler endpoint; per the CVSS 4.0 vector (AV:N/AC:L/PR:N/UI:N) no authentication, no user interaction, and no special attack requirements are needed against firmware 15.03.05.19. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | All raw severity signals point high: the CVSS 4.0 vector is AV:N/AC:L/AT:N/PR:N/UI:N with high impact to both the vulnerable system (VC/VI/VA:H) and subsequent systems (SC/SI/SA:H), yielding 9.3, and the exploit-maturity metric is E:P (proof-of-concept). … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | No vendor-released patch identified at time of analysis; check https://www.tenda.com.cn/ for updated AC18 firmware superseding 15.03.05.19 and apply it once published. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory all Tenda AC18 routers running firmware 15.03.05.19 and immediately deploy firewall rules blocking all inbound access to TCP port 23 and the /goform/telnet endpoint from untrusted networks. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today