CVE-2026-129258
Deferred Deferred - Pending Action

Firmware Upgrade Handler Insufficient Verification in Tenda AC18

Publication date: 2026-11-14

Last updated on: 2026-11-14

Assigner: VulDB

Description
A vulnerability was identified in Tenda AC18 15.03.05.05_multi/15.03.05.19 Build 6318. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/upgrade of the component Firmware Upgrade Handler. Such manipulation of the argument upgradeFile leads to insufficient verification of data authenticity. The attack may be launched remotely. The exploit is publicly available and might be used.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-11-14
Last Modified
2026-11-14
Generated
2026-11-15
AI Q&A
2026-11-14
EPSS Evaluated
N/A
NVD
CVE-2026-129258
EUVD
EUVD-2026-125935

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
tenda ac18 15.03.05.05_multi
tenda ac18 15.03.05.19

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-345 The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability affects Tenda AC18 routers running specific firmware versions. It involves a flaw in the firmware upgrade handler where the upgradeFile argument is not properly verified for authenticity. This allows remote attackers to manipulate the upgrade process, potentially installing malicious firmware.

Detection Guidance

Check if your Tenda AC18 router is running firmware version 15.03.05.05_multi or 15.03.05.19 Build 6318. Use commands like 'curl -X POST http://<router-ip>/cgi-bin/upgrade -d 'upgradeFile=<malicious-payload>' to test for the vulnerability. Monitor network traffic for unexpected firmware upgrade requests.

Impact Analysis

An attacker could exploit this to install unauthorized firmware on your router. This might lead to network compromise, data interception, or turning your device into a botnet participant. Remote attacks are possible without user interaction.

Compliance Impact

This vulnerability could lead to unauthorized access to network traffic or sensitive data, violating GDPR and HIPAA requirements for data protection and integrity. Organizations may face compliance penalties if such breaches occur due to unpatched systems.

Mitigation Strategies

Immediately update the Tenda AC18 firmware to the latest version from the official Tenda website. Disable remote access to the router's web interface if not needed. Block external access to /cgi-bin/upgrade endpoint via firewall rules.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-129258. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...