CVE-2026-0581

moderate-risk
Published 2026-01-05

A vulnerability was determined in Tenda AC1206 15.03.06.23. Affected by this issue is the function formBehaviorManager of the file /goform/BehaviorManager of the component httpd. Executing a manipulation of the argument modulename/option/data/switch can lead to command injection. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.

Do I need to act?

~
1.2% chance of exploitation in next 30 days
EPSS score — moderate exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
6
CVSS 6.3/10 Medium
NETWORK / LOW complexity

Affected Products (1)

Affected Vendors

Tenda

References (5)

Exploit https://github.com/ccc-iotsec/cve-/blob/Tenda/Tenda%20AC1206%E5%91%BD%E4%BB%A4%E...
Permissions Required https://vuldb.com/?ctiid.339473
Third Party Advisory https://vuldb.com/?id.339473
Third Party Advisory https://vuldb.com/?submit.731193
Product https://www.tenda.com.cn/
31
/ 100
moderate-risk
Severity 23/34 · High
Exploitability 3/34 · Minimal
Exposure 5/34 · Minimal