CVE-2026-11493
Deferred Deferred - Pending Action
Weak Password Requirements in Tenda AC15 Samba Configuration

Publication date: 2026-06-08

Last updated on: 2026-06-08

Assigner: VulDB

Description
A weakness has been identified in Tenda AC15 15.03.05.19. The impacted element is an unknown function of the file /etc_ro/smb.conf of the component Samba. Executing a manipulation can lead to weak password requirements. The attack is only possible within the local network. A high complexity level is associated with this attack. The exploitability is regarded as difficult. The exploit has been made available to the public and could be used for attacks.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-06-08
Last Modified
2026-06-08
Generated
2026-06-08
AI Q&A
2026-06-08
EPSS Evaluated
N/A
NVD
CVE-2026-11493
EUVD
EUVD-2026-35024
Affected Vendors & Products
Showing 2 associated CPEs
Vendor Product Version / Range
tenda ac15 15.03.05.19
samba samba *
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-521 The product does not require that users should have strong passwords.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability exists in the Tenda AC15 router firmware version 15.03.05.19, specifically related to an unknown function within the Samba component's /etc_ro/smb.conf file.

The issue allows an attacker within the local network to manipulate the system in a way that results in weak password requirements.

Exploitation of this vulnerability is considered difficult due to the high complexity level, and it requires local network access.

The exploit code has been made publicly available, which could facilitate attacks.

Impact Analysis

If exploited, this vulnerability can lead to weak password enforcement on the affected device.

Weak passwords increase the risk of unauthorized access to the device or network resources managed by the Samba service.

Since the attack requires local network access and is difficult to execute, the immediate risk is somewhat limited but still significant in environments where local network access is possible.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-11493. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart