← Database

CVE-2026-7469

MEDIUM CVSS: 6.3 Published: 2026-04-30 Modified: 2026-06-17

Description

A vulnerability was detected in Tenda 4G300 US_4G300V1.0Mt_V1.01.42_CN_TDC01. This impacts the function sub_425A28 of the file /goform/DelFil. The manipulation of the argument delflag results in command injection. The attack may be launched remotely. The exploit is now public and may be used.

Affected Platforms

Tenda 4G300Tenda 4G300 Firmware

Weakness Type

CWE-74, CWE-77

References