BaseFortify

Publication date: 2026-01-09

Last updated on: 2026-01-09

Assigner: Indian Computer Emergency Response Team (CERT-In)

Description

This vulnerability exists in Tenda wireless routers (300Mbps Wireless Router F3 and N300 Easy Setup Router) due to the transmission of credentials encoded using reversible Base64 encoding through the web-based administrative interface. An attacker on the same network could exploit this vulnerability by intercepting network traffic and capturing the Base64-encoded credentials. Successful exploitation of this vulnerability could allow the attacker to obtain sensitive information and gain unauthorized access to the targeted device.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-01-09

Last Modified

2026-01-09

Generated

2026-07-06

AI Q&A

2026-01-10

EPSS Evaluated

2026-07-05

NVD

CVE-2026-22080

EUVD

EUVD-2026-1755

Affected Vendors & Products

Vendor	Product	Version / Range
tenda	300mbps_wireless_router_f3	*
tenda	n300_easy_setup_router	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-319	The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.

Attack-Flow Graph

Executive Summary

This vulnerability affects certain Tenda wireless routers where credentials are transmitted through the web-based administrative interface encoded only with reversible Base64 encoding. An attacker on the same network can intercept the network traffic, capture these Base64-encoded credentials, decode them easily, and obtain sensitive information.

Impact Analysis

If exploited, an attacker could gain unauthorized access to the affected router by obtaining sensitive credentials. This could lead to compromise of the device, potential network access, and exposure of private information.

Hi! I’m here to help you understand CVE-2026-22080. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70