Details of VAR-202601-4151

ID

VAR-202601-4151

CVE

CVE-2026-1638

TITLE

Shenzhen Tenda Technology Co.,Ltd. of ac21 Multiple vulnerabilities in firmware

Trust: 0.8

sources: JVNDB: JVNDB-2026-006626

DESCRIPTION

A security flaw has been discovered in Tenda AC21 1.1.1.1/1.dmzip/16.03.08.16. The impacted element is the function mDMZSetCfg of the file /goform/mDMZSetCfg. The manipulation of the argument dmzIp results in command injection. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks. Exploits are publicly available and may be used in attacks.All information handled by the software may be leaked to the outside. All information handled by the software may be rewritten. Furthermore, the software may stop working completely

Trust: 1.62

sources: NVD: CVE-2026-1638 // JVNDB: JVNDB-2026-006626

AFFECTED PRODUCTS

vendor:	tenda	model:	ac21	scope:	eq	version:	16.03.08.16	Trust: 1.0
vendor:	tenda	model:	ac21	scope:	eq	version:	ac21 firmware 16.03.08.16	Trust: 0.8
vendor:	tenda	model:	ac21	scope:	eq	version:	-	Trust: 0.8
vendor:	tenda	model:	ac21	scope:	-	version:	-	Trust: 0.8

sources: JVNDB: JVNDB-2026-006626 // NVD: CVE-2026-1638

CVSS

SEVERITY

CVSSV2

CVSSV3

cna@vuldb.com:	CVE-2026-1638
value:	LOW
Trust: 1.0
nvd@nist.gov:	CVE-2026-1638
value:	HIGH
Trust: 1.0
OTHER:	JVNDB-2026-006626
value:	HIGH
Trust: 0.8

cna@vuldb.com:	CVE-2026-1638
severity:	MEDIUM
baseScore:	6.5
vectorString:	AV:N/AC:L/AU:S/C:P/I:P/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	SINGLE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	8.0
impactScore:	6.4
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.0
OTHER:	JVNDB-2026-006626
severity:	MEDIUM
baseScore:	6.5
vectorString:	AV:N/AC:L/AU:S/C:P/I:P/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	SINGLE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	NONE
impactScore:	NONE
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.8

cna@vuldb.com:	CVE-2026-1638
baseSeverity:	MEDIUM
baseScore:	6.3
vectorString:	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	LOW
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	LOW
integrityImpact:	LOW
availabilityImpact:	LOW
exploitabilityScore:	2.8
impactScore:	3.4
version:	3.1
Trust: 1.0
nvd@nist.gov:	CVE-2026-1638
baseSeverity:	HIGH
baseScore:	8.8
vectorString:	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	LOW
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	2.8
impactScore:	5.9
version:	3.1
Trust: 1.0
NVD:	JVNDB-2026-006626
baseSeverity:	HIGH
baseScore:	8.8
vectorString:	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	LOW
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8

sources: JVNDB: JVNDB-2026-006626 // NVD: CVE-2026-1638 // NVD: CVE-2026-1638

PROBLEMTYPE DATA

problemtype:	CWE-74	Trust: 1.0
problemtype:	CWE-77	Trust: 1.0
problemtype:	injection (CWE-74) [ others ]	Trust: 0.8
problemtype:	Command injection (CWE-77) [ others ]	Trust: 0.8
problemtype:	Command injection (CWE-77) [NVD evaluation ]	Trust: 0.8

sources: JVNDB: JVNDB-2026-006626 // NVD: CVE-2026-1638

PATCH

title:

Tenda AC21 V16.03.08.16 Command Injection

url:

https://vuldb.com/?id.343417

Trust: 0.8

sources: JVNDB: JVNDB-2026-006626

EXTERNAL IDS

db:	NVD	id:	CVE-2026-1638	Trust: 2.6
db:	VULDB	id:	343417	Trust: 1.0
db:	JVNDB	id:	JVNDB-2026-006626	Trust: 0.8

sources: JVNDB: JVNDB-2026-006626 // NVD: CVE-2026-1638

REFERENCES

url:	https://www.tenda.com.cn/	Trust: 1.8
url:	https://vuldb.com/?ctiid.343417	Trust: 1.0
url:	https://vuldb.com/?id.343417	Trust: 1.0
url:	https://github.com/lx-lx88/cve/issues/26	Trust: 1.0
url:	https://vuldb.com/?submit.740871	Trust: 1.0
url:	https://nvd.nist.gov/vuln/detail/cve-2026-1638	Trust: 0.8

sources: JVNDB: JVNDB-2026-006626 // NVD: CVE-2026-1638

SOURCES

db:	JVNDB	id:	JVNDB-2026-006626
db:	NVD	id:	CVE-2026-1638

LAST UPDATE DATE

2026-03-12T23:23:00.056000+00:00

SOURCES UPDATE DATE

db:	JVNDB	id:	JVNDB-2026-006626	date:	2026-03-11T07:03:00
db:	NVD	id:	CVE-2026-1638	date:	2026-03-09T17:35:02.300

SOURCES RELEASE DATE

db:	JVNDB	id:	JVNDB-2026-006626	date:	2026-03-11T00:00:00
db:	NVD	id:	CVE-2026-1638	date:	2026-01-30T00:15:57.563