CVE-2026-67966

Deferred Deferred - Pending Action

Unauthenticated Remote Root Access in Tenda W20E

Publication date: 2026-08-17

Last updated on: 2026-08-31

Assigner: MITRE

Description

Tenda W20E V16.01.0.6(2782) /goform/telnet endpoint allows unauthenticated remote attackers to activate the Telnet daemon and obtain root shell access.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-17

Last Modified

2026-08-31

Generated

2026-09-07

AI Q&A

2026-08-18

EPSS Evaluated

2026-09-05

NVD

CVE-2026-67966

Affected Vendors & Products

Vendor	Product	Version / Range
tenda	w20e	16.01.0.6

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-306	The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

Attack-Flow Graph

Executive Summary

This vulnerability allows unauthenticated remote attackers to activate the Telnet daemon on Tenda W20E V16.01.0.6(2782) via the /goform/telnet endpoint and gain root shell access.

Detection Guidance

To detect this vulnerability, scan your network for devices running Tenda W20E firmware V16.01.0.6(2782) or similar versions. Check if the Telnet service (port 23) is unexpectedly open on these devices. Use commands like 'nmap -p 23 <target_IP>' to verify Telnet availability.

Impact Analysis

An attacker could exploit this to gain full control of the device, allowing them to execute arbitrary commands, steal data, or use the device as part of a botnet.

Compliance Impact

This vulnerability allows unauthenticated remote attackers to gain root shell access via the Telnet daemon, which could lead to unauthorized data access, modification, or exfiltration. Such unauthorized access risks violating GDPR's data protection requirements and HIPAA's safeguards for protected health information.

Mitigation Strategies

Immediately disable Telnet access on affected Tenda W20E devices if possible. Update the firmware to a patched version if available. Block external access to port 23 on these devices via firewall rules. Monitor network traffic for unauthorized Telnet connections.

Hi! I’m here to help you understand CVE-2026-67966. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70