CVE-2026-67966

Received Received - Intake

Unauthenticated Remote Root Access in Tenda W20E

Publication date: 2026-08-17

Last updated on: 2026-08-17

Assigner: MITRE

Description

Tenda W20E V16.01.0.6(2782) /goform/telnet endpoint allows unauthenticated remote attackers to activate the Telnet daemon and obtain root shell access.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-17

Last Modified

2026-08-17

Generated

2026-08-18

AI Q&A

2026-08-18

EPSS Evaluated

N/A

NVD

CVE-2026-67966

Affected Vendors & Products

Vendor	Product	Version / Range
tenda	w20e	16.01.0.6

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability allows unauthenticated remote attackers to activate the Telnet daemon on Tenda W20E V16.01.0.6(2782) via the /goform/telnet endpoint and gain root shell access.

Detection Guidance

To detect this vulnerability, scan your network for devices running Tenda W20E firmware V16.01.0.6(2782) or similar versions. Check if the Telnet service (port 23) is unexpectedly open on these devices. Use commands like 'nmap -p 23 <target_IP>' to verify Telnet availability.

Impact Analysis

An attacker could exploit this to gain full control of the device, allowing them to execute arbitrary commands, steal data, or use the device as part of a botnet.

Mitigation Strategies

Immediately disable Telnet access on affected Tenda W20E devices if possible. Update the firmware to a patched version if available. Block external access to port 23 on these devices via firewall rules. Monitor network traffic for unauthorized Telnet connections.

Hi! I’m here to help you understand CVE-2026-67966. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70