CVE-2026-2147

A weakness has been identified in Tenda AC21 16.03.08.16. This impacts an unknown function of the file /cgi-bin/DownloadLog of the component Web Management Interface. Executing a manipulation can lead to information disclosure. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks.
References
Link Resource
https://github.com/master-abc/cve/issues/30 Exploit Issue Tracking Third Party Advisory
https://vuldb.com/?ctiid.344849 Permissions Required VDB Entry
https://vuldb.com/?id.344849 Third Party Advisory VDB Entry
https://vuldb.com/?submit.747429 Third Party Advisory VDB Entry
https://www.tenda.com.cn/ Product
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:tenda:ac21_firmware:16.03.08.16:*:*:*:*:*:*:*
cpe:2.3:h:tenda:ac21:-:*:*:*:*:*:*:*

History

10 Feb 2026, 18:53

Type Values Removed Values Added
CPE cpe:2.3:o:tenda:ac21_firmware:16.03.08.16:*:*:*:*:*:*:*
cpe:2.3:h:tenda:ac21:-:*:*:*:*:*:*:*
First Time Tenda
Tenda ac21
Tenda ac21 Firmware
References () https://github.com/master-abc/cve/issues/30 - () https://github.com/master-abc/cve/issues/30 - Exploit, Issue Tracking, Third Party Advisory
References () https://vuldb.com/?ctiid.344849 - () https://vuldb.com/?ctiid.344849 - Permissions Required, VDB Entry
References () https://vuldb.com/?id.344849 - () https://vuldb.com/?id.344849 - Third Party Advisory, VDB Entry
References () https://vuldb.com/?submit.747429 - () https://vuldb.com/?submit.747429 - Third Party Advisory, VDB Entry
References () https://www.tenda.com.cn/ - () https://www.tenda.com.cn/ - Product

08 Feb 2026, 10:15

Type Values Removed Values Added
New CVE

Information

Published : 2026-02-08 10:15

Updated : 2026-02-10 18:53


NVD link : CVE-2026-2147

Mitre link : CVE-2026-2147

CVE.ORG link : CVE-2026-2147


JSON object : View

Products Affected

tenda

  • ac21
  • ac21_firmware
CWE
CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CWE-284

Improper Access Control