CVE-2026-67966

Description

Tenda W20E V16.01.0.6(2782) /goform/telnet endpoint allows unauthenticated remote attackers to activate the Telnet daemon and obtain root shell access.

References

• https://github.com/H0111mes/Tenda-W20E-Vulnerability-Disclosure