https://vulnerability.circl.lu/sightings/feed 2026-09-18T02:41:26.908970+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/90b5dfdc-55a7-4745-ba4d-b039aa252c26/export 2026-09-18T02:41:26.934853+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "90b5dfdc-55a7-4745-ba4d-b039aa252c26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11405", "type": "seen", "source": "https://t.me/SecLabNews/17920", "content": "\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0441\u043a\u0440\u044b\u0442\u044b\u0439 \u043f\u0430\u0440\u043e\u043b\u044c \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0430\u0445 Tenda\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-11405 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a Tenda, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043c\u043e\u0434\u0435\u043b\u0438 FH1201, W15E, AC10, AC5 \u0438 AC6. \u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b CERT \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0432 \u0444\u0430\u0439\u043b\u0435 /bin/httpd \u0441\u043a\u0440\u044b\u0442\u044b\u0439 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u0438 \u043d\u0435\u0443\u0434\u0430\u0447\u043d\u043e\u0439 \u043e\u0431\u044b\u0447\u043d\u043e\u0439 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u043e\u0431\u0440\u0430\u0449\u0430\u0435\u0442\u0441\u044f \u043a \u0437\u0430\u043f\u0430\u0441\u043d\u043e\u043c\u0443 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044e sys.rzadmin.password \u0438 \u0441\u0440\u0430\u0432\u043d\u0438\u0432\u0430\u0435\u0442 \u0435\u0433\u043e \u0441 \u0432\u0432\u0435\u0434\u0451\u043d\u043d\u044b\u043c \u043f\u0430\u0440\u043e\u043b\u0435\u043c \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0432\u0438\u0434\u0435.\n\n\u0418\u043c\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043f\u0440\u0438 \u044d\u0442\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0435 \u043d\u0435 \u0443\u0447\u0438\u0442\u044b\u0432\u0430\u0435\u0442\u0441\u044f, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0443\u043a\u0430\u0437\u0430\u0442\u044c \u043b\u044e\u0431\u043e\u0435 \u0438\u043c\u044f \u0438 \u043f\u043e\u0434\u043e\u0431\u0440\u0430\u0442\u044c \u0441\u043a\u0440\u044b\u0442\u044b\u0439 \u043f\u0430\u0440\u043e\u043b\u044c, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0443\u044e \u0441\u0435\u0441\u0441\u0438\u044e \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430. \u0422\u0430\u043a\u043e\u0439 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u043d\u0435 \u043e\u043f\u0438\u0441\u0430\u043d \u0432 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u0446\u0438\u0438 Tenda, \u0430 \u0432 \u043f\u0430\u043d\u0435\u043b\u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0432\u043b\u0430\u0434\u0435\u043b\u0435\u0446 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043d\u0435 \u0432\u0438\u0434\u0438\u0442 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u043d\u0438\u043c \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043a.\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u0430\u0442\u0430\u043a\u0430 \u0434\u0430\u0451\u0442 \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u043e\u043c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u043c\u0435\u043d\u044f\u0442\u044c \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u0441\u0435\u0442\u0438, \u043e\u0442\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u043d\u044b\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0440\u043e\u0443\u0442\u0435\u0440 \u043a\u0430\u043a \u0442\u043e\u0447\u043a\u0443 \u0432\u0445\u043e\u0434\u0430 \u0434\u043b\u044f \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u0443\u044e \u0441\u0435\u0442\u044c. CERT \u0441\u043e\u043e\u0431\u0449\u0438\u043b, \u0447\u0442\u043e \u043d\u0435 \u0441\u043c\u043e\u0433 \u0441\u0432\u044f\u0437\u0430\u0442\u044c\u0441\u044f \u0441 Tenda, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0430\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0441\u043e\u0432\u0435\u0442\u0443\u044e\u0442 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0447\u0435\u0440\u0435\u0437 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0430\u043d\u0435\u043b\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438\u0437 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438.\n\n#tenda #\u0440\u043e\u0443\u0442\u0435\u0440 #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #\u043f\u0430\u0440\u043e\u043b\u044c\n\n@ZerodayAlert", "creation_timestamp": "2026-09-03T00:00:40.839372Z"} 2026-09-03T00:00:40.839372+00:00 https://vulnerability.circl.lu/sighting/9e45fb70-9b55-43b3-8bf3-e0b3daf27591/export 2026-09-18T02:41:26.936969+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "9e45fb70-9b55-43b3-8bf3-e0b3daf27591", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11405", "type": "seen", "source": "https://t.me/SecLabNews/17920", "content": "\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0441\u043a\u0440\u044b\u0442\u044b\u0439 \u043f\u0430\u0440\u043e\u043b\u044c \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0430\u0445 Tenda\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-11405 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a Tenda, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043c\u043e\u0434\u0435\u043b\u0438 FH1201, W15E, AC10, AC5 \u0438 AC6. \u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b CERT \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0432 \u0444\u0430\u0439\u043b\u0435 /bin/httpd \u0441\u043a\u0440\u044b\u0442\u044b\u0439 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u0438 \u043d\u0435\u0443\u0434\u0430\u0447\u043d\u043e\u0439 \u043e\u0431\u044b\u0447\u043d\u043e\u0439 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u043e\u0431\u0440\u0430\u0449\u0430\u0435\u0442\u0441\u044f \u043a \u0437\u0430\u043f\u0430\u0441\u043d\u043e\u043c\u0443 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044e sys.rzadmin.password \u0438 \u0441\u0440\u0430\u0432\u043d\u0438\u0432\u0430\u0435\u0442 \u0435\u0433\u043e \u0441 \u0432\u0432\u0435\u0434\u0451\u043d\u043d\u044b\u043c \u043f\u0430\u0440\u043e\u043b\u0435\u043c \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0432\u0438\u0434\u0435.\n\n\u0418\u043c\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043f\u0440\u0438 \u044d\u0442\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0435 \u043d\u0435 \u0443\u0447\u0438\u0442\u044b\u0432\u0430\u0435\u0442\u0441\u044f, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0443\u043a\u0430\u0437\u0430\u0442\u044c \u043b\u044e\u0431\u043e\u0435 \u0438\u043c\u044f \u0438 \u043f\u043e\u0434\u043e\u0431\u0440\u0430\u0442\u044c \u0441\u043a\u0440\u044b\u0442\u044b\u0439 \u043f\u0430\u0440\u043e\u043b\u044c, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0443\u044e \u0441\u0435\u0441\u0441\u0438\u044e \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430. \u0422\u0430\u043a\u043e\u0439 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u043d\u0435 \u043e\u043f\u0438\u0441\u0430\u043d \u0432 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u0446\u0438\u0438 Tenda, \u0430 \u0432 \u043f\u0430\u043d\u0435\u043b\u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0432\u043b\u0430\u0434\u0435\u043b\u0435\u0446 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043d\u0435 \u0432\u0438\u0434\u0438\u0442 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u043d\u0438\u043c \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043a.\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u0430\u0442\u0430\u043a\u0430 \u0434\u0430\u0451\u0442 \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u043e\u043c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u043c\u0435\u043d\u044f\u0442\u044c \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u0441\u0435\u0442\u0438, \u043e\u0442\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u043d\u044b\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0440\u043e\u0443\u0442\u0435\u0440 \u043a\u0430\u043a \u0442\u043e\u0447\u043a\u0443 \u0432\u0445\u043e\u0434\u0430 \u0434\u043b\u044f \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u0443\u044e \u0441\u0435\u0442\u044c. CERT \u0441\u043e\u043e\u0431\u0449\u0438\u043b, \u0447\u0442\u043e \u043d\u0435 \u0441\u043c\u043e\u0433 \u0441\u0432\u044f\u0437\u0430\u0442\u044c\u0441\u044f \u0441 Tenda, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0430\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0441\u043e\u0432\u0435\u0442\u0443\u044e\u0442 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0447\u0435\u0440\u0435\u0437 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0430\u043d\u0435\u043b\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438\u0437 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438.\n\n#tenda #\u0440\u043e\u0443\u0442\u0435\u0440 #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #\u043f\u0430\u0440\u043e\u043b\u044c\n\n@ZerodayAlert", "creation_timestamp": "2026-09-02T17:00:19.517984Z"} 2026-09-02T17:00:19.517984+00:00 https://vulnerability.circl.lu/sighting/4f1588f9-7ee2-42ef-8f43-0710eb97f876/export 2026-09-18T02:41:26.937125+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "4f1588f9-7ee2-42ef-8f43-0710eb97f876", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11405", "type": "seen", "source": "https://t.me/xhqcankao/30741", "content": "\u817e\u8fbe\u7f51\u7edc\u8def\u7531\u5668\u8bbe\u5907\u66dd\u51fa\u672a\u516c\u5f00\u4e07\u80fd\u5bc6\u7801\n\n\u817e\u8fbe\u7f51\u7edc\u8def\u7531\u5668\u56fa\u4ef6\u7684\u591a\u4e2a\u7248\u672c\u5305\u542b\u4e00\u4e2a\u672a\u516c\u5f00\u7684\u8eab\u4efd\u9a8c\u8bc1\u540e\u95e8\uff0c\u8fd9\u4e00\u540e\u95e8\u6388\u4e88\u5bf9\u8bbe\u5907Web\u7ba1\u7406\u754c\u9762\u7684\u7ba1\u7406\u8bbf\u95ee\u6743\u9650\u3002\u653b\u51fb\u8005\u53ef\u4ee5\u5229\u7528\u6b64\u6f0f\u6d1e\uff08\u7f16\u53f7\u4e3aCVE-2026-11405\uff09\u7ed5\u8fc7\u5bc6\u7801\u9a8c\u8bc1\u8fc7\u7a0b\uff0c\u5e76\u5728\u6ca1\u6709\u6709\u6548\u51ed\u636e\u7684\u60c5\u51b5\u4e0b\u83b7\u5f97\u5b8c\u5168\u7684\u7ba1\u7406\u63a7\u5236\u6743\u3002\u5176Web\u670d\u52a1\u5668\u7a0b\u5e8f/bin/httpd\u5728\u5e38\u89c4MD5\u9a8c\u8bc1\u5931\u8d25\u65f6\uff0c\u4f1a\u8c03\u7528\u7279\u5b9a\u51fd\u6570\u6bd4\u5bf9\u914d\u7f6e\u4e2d\u7684\u660e\u6587\u540e\u95e8\u5bc6\u7801\u3002\u653b\u51fb\u8005\u65e0\u9700\u9a8c\u8bc1\u7528\u6237\u540d\uff0c\u4ec5\u51ed\u8be5\u5bc6\u7801\u5373\u53ef\u901a\u8fc7strcmp()\u6bd4\u5bf9\u7ed5\u8fc7\u8ba4\u8bc1\uff0c\u76f4\u63a5\u83b7\u53d6\u7ba1\u7406\u5458\u6743\u9650\uff08role=2\uff09\u5e76\u5b8c\u5168\u63a7\u5236\u8bbe\u5907\u3002\u7531\u4e8e\u76ee\u524d\u6682\u65e0\u5b98\u65b9\u8865\u4e01\uff0c\u7528\u6237\u53ef\u4ee5\u91c7\u53d6\u4ee5\u4e0b\u7f13\u89e3\u63aa\u65bd\u89c4\u907f\u98ce\u9669\uff1a\u7981\u7528\u8fdc\u7a0b\u7ba1\u7406\u3001\u66f4\u6539LAN IP\u4ee5\u9632\u6b62\u5916\u90e8\u626b\u63cf\u6e17\u900f\u5e76\u964d\u4f4e\u88ab\u5de5\u5177\u53d1\u73b0\u6982\u7387\u3002\n\n\u2014\u2014 kb.cert.org", "creation_timestamp": "2026-08-30T00:00:10.136562Z"} 2026-08-30T00:00:10.136562+00:00 https://vulnerability.circl.lu/sighting/bc7eba16-8a5a-4be0-a151-b387fcf57108/export 2026-09-18T02:41:26.937241+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "bc7eba16-8a5a-4be0-a151-b387fcf57108", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11405", "type": "seen", "source": "https://bsky.app/profile/cybersecurity.poliverso.org.ap.brid.gy/post/3msfccivlmgi2", "content": "**Hacking a Tenda AC1200 Wi-Fi Router with a CVE Combo**\n\nIt\u2019s rather awkward when you buy a piece of hardware like a sketchy router to make a video about its hidden admin password backdoor \u2013 known as CVE-2026-11405 \u2013 only to discover that you bought the wrong [\u2026] \n\n[Original post on poliverso.org]", "creation_timestamp": "2026-08-06T05:24:33.386888Z"} 2026-08-06T05:24:33.386888+00:00 https://vulnerability.circl.lu/sighting/0e2e24ac-d2e5-4444-9a3a-29536bd89998/export 2026-09-18T02:41:26.937347+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "0e2e24ac-d2e5-4444-9a3a-29536bd89998", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11405", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-200b7b8f-501df460d4f791f9", "content": "Hacking a Tenda AC1200 Wi-Fi Router with a CVE Combo\nIt\u2019s rather awkward when you buy a piece of hardware like a sketchy router to make a video about its hidden admin password backdoor \u2013 known as CVE-2026-11405 \u2013 only to discover that you bought the wrong Tenda router, namely the AC10V6 model. After making this mistake, [Low Level] did the only reasonable thing one ought to do in this case, and try to find an exploit in this \u2018wrong\u2019 router as well.\nThe obvious start here is to do the same as with the other exploit, in that you download a firmware image from the manufacturer\u2019s website, then pluck it apart using binwalkto do an initial check for juicy files. After that tools like Ghidra can be used to do a more in-depth analysis of any binary files, with a special focus on things like user-facing elements like login screen, as input validation will likely forever remain the number one type of exploited CVE.\nOne major change that Tenda made here was to encrypt the firmware image, which seemed suspicious. With that easy path blocked, the research of others on different Tenda routers was looked at, including the AC20 with the fascinating Telnet exploit in the form of CVE-2025-9090 where merely poking a file on the device turned on the Telnet service. This left the minor issue of finding a password to log into said Telnet session.\nIz in ur Tenda AC10V6, h4x0ring your printf output. (Credit: Low Level, YouTube)This is where CVE-2025-52054 comes in handy, as this explains how to calculate the root password of a Tenda router using a static string and the last two octets of the device\u2019s MAC address. The unfortunate aspect here is that this static string is unknown for this particular router, and the AC8 version did not work. Luckily, for some unknown reason Tenda did decide that they had to print this secret information to the serial output, ergo it was time to probe the UART pins on the router\u2019s guts.\nOne hard reset later and the console output on these UART pins happily showed that the password pre-Base64 encoding was 9cUFeUZC_125700. Mashing in the Base64-encoded string in the Telnet login gave root access and completed the first step of the whole fun, as now [Low Level] also had access to the decrypted firmware including the decryption keys for the previously safely encrypted firmware image.\nThere will be a blog post published with likely the keys and other details after clearing it with [Low Level]\u2019s lawyer, but even at this point it\u2019s truly a tragedy of CVEs on the side of Tenda that led to this outcome. If you ever needed a reason not to let friends use Tenda routers, this has got to be another good reason.\nyoutube.com/embed/2t6-AxpZXiA?\u2026 \nhackaday.com/2026/08/05/hackin\u2026", "creation_timestamp": "2026-08-06T05:20:24.092739Z"} 2026-08-06T05:20:24.092739+00:00 https://vulnerability.circl.lu/sighting/ae47dc46-215d-4d5d-a7a2-d20f37785a4e/export 2026-09-18T02:41:26.937474+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "ae47dc46-215d-4d5d-a7a2-d20f37785a4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11405", "type": "seen", "source": "https://bsky.app/profile/feed.igeek.gamer-geek-news.com.ap.brid.gy/post/3msfb7e76tzg2", "content": "\ud83d\udcf0 **Hacking a Tenda AC1200 Wi-Fi Router with a CVE Combo**\n\nIt\u2019s rather awkward when you buy a piece of hardware like a sketchy router to make a video about its hidden admin password backdoor \u2013 known as CVE-2026-11405 \u2013 only \u2026read more\n\n\ud83d\udcf0 Source [\u2026] \n\n[Original post on igeek.gamer-geek-news.com]", "creation_timestamp": "2026-08-06T05:02:21.295819Z"} 2026-08-06T05:02:21.295819+00:00 https://vulnerability.circl.lu/sighting/8107461b-4c30-49e1-8238-20fcd944f951/export 2026-09-18T02:41:26.937579+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "8107461b-4c30-49e1-8238-20fcd944f951", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11405", "type": "seen", "source": "https://t.me/ZerodayAlert/754", "content": "\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0441\u043a\u0440\u044b\u0442\u044b\u0439 \u043f\u0430\u0440\u043e\u043b\u044c \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0430\u0445 Tenda\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-11405 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a Tenda, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043c\u043e\u0434\u0435\u043b\u0438 FH1201, W15E, AC10, AC5 \u0438 AC6. \u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b CERT \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0432 \u0444\u0430\u0439\u043b\u0435 /bin/httpd \u0441\u043a\u0440\u044b\u0442\u044b\u0439 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u0438 \u043d\u0435\u0443\u0434\u0430\u0447\u043d\u043e\u0439 \u043e\u0431\u044b\u0447\u043d\u043e\u0439 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u043e\u0431\u0440\u0430\u0449\u0430\u0435\u0442\u0441\u044f \u043a \u0437\u0430\u043f\u0430\u0441\u043d\u043e\u043c\u0443 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044e sys.rzadmin.password \u0438 \u0441\u0440\u0430\u0432\u043d\u0438\u0432\u0430\u0435\u0442 \u0435\u0433\u043e \u0441 \u0432\u0432\u0435\u0434\u0451\u043d\u043d\u044b\u043c \u043f\u0430\u0440\u043e\u043b\u0435\u043c \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0432\u0438\u0434\u0435.\n\n\u0418\u043c\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043f\u0440\u0438 \u044d\u0442\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0435 \u043d\u0435 \u0443\u0447\u0438\u0442\u044b\u0432\u0430\u0435\u0442\u0441\u044f, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0443\u043a\u0430\u0437\u0430\u0442\u044c \u043b\u044e\u0431\u043e\u0435 \u0438\u043c\u044f \u0438 \u043f\u043e\u0434\u043e\u0431\u0440\u0430\u0442\u044c \u0441\u043a\u0440\u044b\u0442\u044b\u0439 \u043f\u0430\u0440\u043e\u043b\u044c, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0443\u044e \u0441\u0435\u0441\u0441\u0438\u044e \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430. \u0422\u0430\u043a\u043e\u0439 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u043d\u0435 \u043e\u043f\u0438\u0441\u0430\u043d \u0432 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u0446\u0438\u0438 Tenda, \u0430 \u0432 \u043f\u0430\u043d\u0435\u043b\u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0432\u043b\u0430\u0434\u0435\u043b\u0435\u0446 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043d\u0435 \u0432\u0438\u0434\u0438\u0442 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u043d\u0438\u043c \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043a.\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u0430\u0442\u0430\u043a\u0430 \u0434\u0430\u0451\u0442 \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u043e\u043c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u043c\u0435\u043d\u044f\u0442\u044c \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u0441\u0435\u0442\u0438, \u043e\u0442\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u043d\u044b\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0440\u043e\u0443\u0442\u0435\u0440 \u043a\u0430\u043a \u0442\u043e\u0447\u043a\u0443 \u0432\u0445\u043e\u0434\u0430 \u0434\u043b\u044f \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u0443\u044e \u0441\u0435\u0442\u044c. CERT \u0441\u043e\u043e\u0431\u0449\u0438\u043b, \u0447\u0442\u043e \u043d\u0435 \u0441\u043c\u043e\u0433 \u0441\u0432\u044f\u0437\u0430\u0442\u044c\u0441\u044f \u0441 Tenda, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0430\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0441\u043e\u0432\u0435\u0442\u0443\u044e\u0442 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0447\u0435\u0440\u0435\u0437 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0430\u043d\u0435\u043b\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438\u0437 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438.\n\n#tenda #\u0440\u043e\u0443\u0442\u0435\u0440 #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #\u043f\u0430\u0440\u043e\u043b\u044c\n\n@ZerodayAlert", "creation_timestamp": "2026-07-26T00:00:39.089856Z"} 2026-07-26T00:00:39.089856+00:00 https://vulnerability.circl.lu/sighting/cfdb246c-65d2-4869-8fcf-709fdd606149/export 2026-09-18T02:41:26.937700+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "cfdb246c-65d2-4869-8fcf-709fdd606149", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11405", "type": "seen", "source": "https://t.me/ZerodayAlert/754", "content": "\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0441\u043a\u0440\u044b\u0442\u044b\u0439 \u043f\u0430\u0440\u043e\u043b\u044c \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0430\u0445 Tenda\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-11405 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a Tenda, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043c\u043e\u0434\u0435\u043b\u0438 FH1201, W15E, AC10, AC5 \u0438 AC6. \u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b CERT \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0432 \u0444\u0430\u0439\u043b\u0435 /bin/httpd \u0441\u043a\u0440\u044b\u0442\u044b\u0439 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u0438 \u043d\u0435\u0443\u0434\u0430\u0447\u043d\u043e\u0439 \u043e\u0431\u044b\u0447\u043d\u043e\u0439 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u043e\u0431\u0440\u0430\u0449\u0430\u0435\u0442\u0441\u044f \u043a \u0437\u0430\u043f\u0430\u0441\u043d\u043e\u043c\u0443 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044e sys.rzadmin.password \u0438 \u0441\u0440\u0430\u0432\u043d\u0438\u0432\u0430\u0435\u0442 \u0435\u0433\u043e \u0441 \u0432\u0432\u0435\u0434\u0451\u043d\u043d\u044b\u043c \u043f\u0430\u0440\u043e\u043b\u0435\u043c \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0432\u0438\u0434\u0435.\n\n\u0418\u043c\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043f\u0440\u0438 \u044d\u0442\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0435 \u043d\u0435 \u0443\u0447\u0438\u0442\u044b\u0432\u0430\u0435\u0442\u0441\u044f, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0443\u043a\u0430\u0437\u0430\u0442\u044c \u043b\u044e\u0431\u043e\u0435 \u0438\u043c\u044f \u0438 \u043f\u043e\u0434\u043e\u0431\u0440\u0430\u0442\u044c \u0441\u043a\u0440\u044b\u0442\u044b\u0439 \u043f\u0430\u0440\u043e\u043b\u044c, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0443\u044e \u0441\u0435\u0441\u0441\u0438\u044e \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430. \u0422\u0430\u043a\u043e\u0439 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u043d\u0435 \u043e\u043f\u0438\u0441\u0430\u043d \u0432 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u0446\u0438\u0438 Tenda, \u0430 \u0432 \u043f\u0430\u043d\u0435\u043b\u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0432\u043b\u0430\u0434\u0435\u043b\u0435\u0446 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043d\u0435 \u0432\u0438\u0434\u0438\u0442 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u043d\u0438\u043c \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043a.\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u0430\u0442\u0430\u043a\u0430 \u0434\u0430\u0451\u0442 \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u043e\u043c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u043c\u0435\u043d\u044f\u0442\u044c \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u0441\u0435\u0442\u0438, \u043e\u0442\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u043d\u044b\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0440\u043e\u0443\u0442\u0435\u0440 \u043a\u0430\u043a \u0442\u043e\u0447\u043a\u0443 \u0432\u0445\u043e\u0434\u0430 \u0434\u043b\u044f \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u0443\u044e \u0441\u0435\u0442\u044c. CERT \u0441\u043e\u043e\u0431\u0449\u0438\u043b, \u0447\u0442\u043e \u043d\u0435 \u0441\u043c\u043e\u0433 \u0441\u0432\u044f\u0437\u0430\u0442\u044c\u0441\u044f \u0441 Tenda, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0430\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0441\u043e\u0432\u0435\u0442\u0443\u044e\u0442 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0447\u0435\u0440\u0435\u0437 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0430\u043d\u0435\u043b\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438\u0437 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438.\n\n#tenda #\u0440\u043e\u0443\u0442\u0435\u0440 #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #\u043f\u0430\u0440\u043e\u043b\u044c\n\n@ZerodayAlert", "creation_timestamp": "2026-07-25T15:00:05.741531Z"} 2026-07-25T15:00:05.741531+00:00 https://vulnerability.circl.lu/sighting/d74ac16c-11b4-499e-91f1-277a38248afa/export 2026-09-18T02:41:26.937815+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "d74ac16c-11b4-499e-91f1-277a38248afa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11405", "type": "seen", "source": "https://t.me/ViralCyber/25444", "content": "\ud83d\udd34 \u06cc\u06a9 \u0628\u06a9\u062f\u0648\u0631 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0645\u062e\u0641\u06cc \u062f\u0631 \u0686\u0646\u062f\u06cc\u0646 \u0646\u0633\u062e\u0647 \u0633\u06cc\u0633\u062a\u0645\u200c\u0639\u0627\u0645\u0644 \u0631\u0648\u062a\u0631\u0647\u0627\u06cc Tenda \u067e\u06cc\u062f\u0627 \u0634\u062f\u0647 \u06a9\u0647 \u0628\u0647 \u0637\u0648\u0631 \u0628\u0627\u0644\u0642\u0648\u0647 \u0628\u0647 \u0645\u0647\u0627\u062c\u0645 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u062f\u0647 \u0628\u0647 \u067e\u0646\u0644 \u0645\u062f\u06cc\u0631\u06cc\u062a \u0648\u0628 \u062f\u0633\u062a\u06af\u0627\u0647 \u062f\u0633\u062a\u0631\u0633\u06cc \u0645\u062f\u06cc\u0631\u06cc\u062a\u06cc \u067e\u06cc\u062f\u0627 \u06a9\u0646\u0647. \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0628\u0627 \u0634\u0646\u0627\u0633\u0647 \u06cc CVE-2026-11405 \u0648 \u062f\u0631 \u062a\u0627\u0628\u0639 login \u062f\u0631 \u0641\u0627\u06cc\u0644 bin/httpd \u0647\u0633\u062a\u0634. \n\n\u0627\u06af\u0647 \u06cc\u06a9 \u06a9\u0627\u0631\u0628\u0631 \u0645\u0639\u0645\u0648\u0644\u06cc \u0628\u062e\u0648\u0627\u062f \u0628\u0647 \u067e\u0646\u0644 \u0644\u0627\u06af\u06cc\u0646 \u06a9\u0646\u0647\u060c \u0646\u06cc\u0627\u0632 \u0628\u0647 \u0646\u0627\u0645 \u06a9\u0627\u0631\u0628\u0631\u06cc \u0648 \u067e\u0633\u0648\u0631\u062f \u062f\u0627\u0631\u0647. \u0633\u06cc\u0633\u062a\u0645 \u0627\u06cc\u0646 \u0646\u0627\u0645 \u06a9\u0627\u0631\u0628\u0631\u06cc \u0648 \u067e\u0633\u0648\u0631\u062f \u0631\u0648 \u0628\u0631\u0631\u0633\u06cc \u0645\u06cc\u06a9\u0646\u0647 \u0627\u06af\u0647 \u062f\u0631\u0633\u062a \u0628\u0648\u062f \u0627\u062c\u0627\u0632\u0647 \u06cc \u0644\u0627\u06af\u06cc\u0646 \u0631\u0648 \u0645\u06cc\u062f\u0647 \u062f\u0631 \u063a\u06cc\u0631 \u0627\u06cc\u0646 \u0635\u0648\u0631\u062a \u0648\u0627\u0631\u062f \u06cc\u06a9 \u0645\u0631\u062d\u0644\u0647 \u06cc \u062f\u0648\u0645 \u0645\u06cc\u0634\u0647. \u062f\u0631 \u0627\u06cc\u0646 \u0645\u0631\u062d\u0644\u0647 \u0633\u06cc\u0633\u062a\u0645 \u067e\u0633\u0648\u0631\u062f \u0648\u0631\u0648\u062f\u06cc \u0631\u0648 \u0628\u0627 \u06cc\u06a9 \u067e\u0633\u0648\u0631\u062f \u0627\u0632 \u067e\u06cc\u0634 \u062a\u0639\u0631\u06cc\u0641 \u0634\u062f\u0647 \u062f\u0631 sys.rzadmin.password \u0628\u0631\u0631\u0633\u06cc \u0645\u06cc\u06a9\u0646\u0647. \u0627\u06af\u0647 \u062f\u0631\u0633\u062a \u0628\u0627\u0634\u0647\u060c \u0628\u062f\u0648\u0646 \u062a\u0648\u062c\u0647 \u0628\u0647 \u0646\u0627\u0645 \u06a9\u0627\u0631\u0628\u0631\u06cc\u060c \u0627\u0645\u06a9\u0627\u0646 \u0644\u0627\u06af\u06cc\u0646 \u0631\u0648 \u0628\u0647 \u0645\u0647\u0627\u062c\u0645 \u0645\u06cc\u062f\u0647.\n\n\u062f\u0633\u062a\u06af\u0627\u0647\u0647\u0627\u06cc\u06cc \u06a9\u0647 \u062a\u062d\u062a \u062a\u0627\u062b\u06cc\u0631 \u0647\u0633\u062a\u0646:\n\n- US_FH1201V1.0BR_V1.2.0.14(408)_EN_TD \u2013 Tenda FH1201 (\u0631\u0648\u062a\u0631 WiFi)\n- US_W15EV1.0br_V15.11.0.5(1068_1567_841)_EN_TDE \u2013 Tenda W15E (\u0631\u0648\u062a\u0631 WiFi)\n- US_AC10V1.0re_V15.03.06.46_multi_TDE01 \u2013 Tenda AC10 (\u0631\u0648\u062a\u0631 WiFi)\n- US_AC5V1.0RTL_V15.03.06.48_multi_TDE01 \u2013 Tenda AC5 (\u0631\u0648\u062a\u0631 WiFi)\n- US_AC6V2.0RTL_V15.03.06.51_multi_T \u2013 Tenda AC6 V2 (\u0631\u0648\u062a\u0631 WiFi)\n\n#\u0628\u06a9\u062f\u0648\u0631 \n#Tenda \n\n\ud83c\udd94 @onhex_ir \n\ud83c\udf0d ONHEXGROUP (Official Links)", "creation_timestamp": "2026-07-24T00:00:08.646893Z"} 2026-07-24T00:00:08.646893+00:00 https://vulnerability.circl.lu/sighting/47ec737f-9e6c-4359-a2b9-b00881c26004/export 2026-09-18T02:41:26.937935+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "47ec737f-9e6c-4359-a2b9-b00881c26004", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11405", "type": "seen", "source": "https://t.me/ViralCyber/25444", "content": "\ud83d\udd34 \u06cc\u06a9 \u0628\u06a9\u062f\u0648\u0631 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0645\u062e\u0641\u06cc \u062f\u0631 \u0686\u0646\u062f\u06cc\u0646 \u0646\u0633\u062e\u0647 \u0633\u06cc\u0633\u062a\u0645\u200c\u0639\u0627\u0645\u0644 \u0631\u0648\u062a\u0631\u0647\u0627\u06cc Tenda \u067e\u06cc\u062f\u0627 \u0634\u062f\u0647 \u06a9\u0647 \u0628\u0647 \u0637\u0648\u0631 \u0628\u0627\u0644\u0642\u0648\u0647 \u0628\u0647 \u0645\u0647\u0627\u062c\u0645 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u062f\u0647 \u0628\u0647 \u067e\u0646\u0644 \u0645\u062f\u06cc\u0631\u06cc\u062a \u0648\u0628 \u062f\u0633\u062a\u06af\u0627\u0647 \u062f\u0633\u062a\u0631\u0633\u06cc \u0645\u062f\u06cc\u0631\u06cc\u062a\u06cc \u067e\u06cc\u062f\u0627 \u06a9\u0646\u0647. \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0628\u0627 \u0634\u0646\u0627\u0633\u0647 \u06cc CVE-2026-11405 \u0648 \u062f\u0631 \u062a\u0627\u0628\u0639 login \u062f\u0631 \u0641\u0627\u06cc\u0644 bin/httpd \u0647\u0633\u062a\u0634. \n\n\u0627\u06af\u0647 \u06cc\u06a9 \u06a9\u0627\u0631\u0628\u0631 \u0645\u0639\u0645\u0648\u0644\u06cc \u0628\u062e\u0648\u0627\u062f \u0628\u0647 \u067e\u0646\u0644 \u0644\u0627\u06af\u06cc\u0646 \u06a9\u0646\u0647\u060c \u0646\u06cc\u0627\u0632 \u0628\u0647 \u0646\u0627\u0645 \u06a9\u0627\u0631\u0628\u0631\u06cc \u0648 \u067e\u0633\u0648\u0631\u062f \u062f\u0627\u0631\u0647. \u0633\u06cc\u0633\u062a\u0645 \u0627\u06cc\u0646 \u0646\u0627\u0645 \u06a9\u0627\u0631\u0628\u0631\u06cc \u0648 \u067e\u0633\u0648\u0631\u062f \u0631\u0648 \u0628\u0631\u0631\u0633\u06cc \u0645\u06cc\u06a9\u0646\u0647 \u0627\u06af\u0647 \u062f\u0631\u0633\u062a \u0628\u0648\u062f \u0627\u062c\u0627\u0632\u0647 \u06cc \u0644\u0627\u06af\u06cc\u0646 \u0631\u0648 \u0645\u06cc\u062f\u0647 \u062f\u0631 \u063a\u06cc\u0631 \u0627\u06cc\u0646 \u0635\u0648\u0631\u062a \u0648\u0627\u0631\u062f \u06cc\u06a9 \u0645\u0631\u062d\u0644\u0647 \u06cc \u062f\u0648\u0645 \u0645\u06cc\u0634\u0647. \u062f\u0631 \u0627\u06cc\u0646 \u0645\u0631\u062d\u0644\u0647 \u0633\u06cc\u0633\u062a\u0645 \u067e\u0633\u0648\u0631\u062f \u0648\u0631\u0648\u062f\u06cc \u0631\u0648 \u0628\u0627 \u06cc\u06a9 \u067e\u0633\u0648\u0631\u062f \u0627\u0632 \u067e\u06cc\u0634 \u062a\u0639\u0631\u06cc\u0641 \u0634\u062f\u0647 \u062f\u0631 sys.rzadmin.password \u0628\u0631\u0631\u0633\u06cc \u0645\u06cc\u06a9\u0646\u0647. \u0627\u06af\u0647 \u062f\u0631\u0633\u062a \u0628\u0627\u0634\u0647\u060c \u0628\u062f\u0648\u0646 \u062a\u0648\u062c\u0647 \u0628\u0647 \u0646\u0627\u0645 \u06a9\u0627\u0631\u0628\u0631\u06cc\u060c \u0627\u0645\u06a9\u0627\u0646 \u0644\u0627\u06af\u06cc\u0646 \u0631\u0648 \u0628\u0647 \u0645\u0647\u0627\u062c\u0645 \u0645\u06cc\u062f\u0647.\n\n\u062f\u0633\u062a\u06af\u0627\u0647\u0647\u0627\u06cc\u06cc \u06a9\u0647 \u062a\u062d\u062a \u062a\u0627\u062b\u06cc\u0631 \u0647\u0633\u062a\u0646:\n\n- US_FH1201V1.0BR_V1.2.0.14(408)_EN_TD \u2013 Tenda FH1201 (\u0631\u0648\u062a\u0631 WiFi)\n- US_W15EV1.0br_V15.11.0.5(1068_1567_841)_EN_TDE \u2013 Tenda W15E (\u0631\u0648\u062a\u0631 WiFi)\n- US_AC10V1.0re_V15.03.06.46_multi_TDE01 \u2013 Tenda AC10 (\u0631\u0648\u062a\u0631 WiFi)\n- US_AC5V1.0RTL_V15.03.06.48_multi_TDE01 \u2013 Tenda AC5 (\u0631\u0648\u062a\u0631 WiFi)\n- US_AC6V2.0RTL_V15.03.06.51_multi_T \u2013 Tenda AC6 V2 (\u0631\u0648\u062a\u0631 WiFi)\n\n#\u0628\u06a9\u062f\u0648\u0631 \n#Tenda \n\n\ud83c\udd94 @onhex_ir \n\ud83c\udf0d ONHEXGROUP (Official Links)", "creation_timestamp": "2026-07-23T12:00:03.080640Z"} 2026-07-23T12:00:03.080640+00:00