CVE-2026-2147

A weakness has been identified in Tenda AC21 16.03.08.16. This impacts an unknown function of the file /cgi-bin/DownloadLog of the component Web Management Interface. Executing a manipulation can lead to information disclosure. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks.

• CWE-200
• CWE-284

• https://github.com/master-abc/cve/issues/30Exploit, Issue Tracking, Third Party Advisory
• https://vuldb.com/?ctiid.344849Permissions Required, VDB Entry
• https://vuldb.com/?id.344849Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.747429Third Party Advisory, VDB Entry
• https://www.tenda.com.cn/Product

Published

Feb 8, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-21449Bagisto is an open source laravel eCommerce platform. Versio…8.8
• CVE-2026-2145A vulnerability was identified in cym1102 nginxWebUI up to 4…5.4
• CVE-2026-21450Bagisto is an open source laravel eCommerce platform. Versio…9.8
• CVE-2026-21451Bagisto is an open source laravel eCommerce platform. A stor…8.4
• CVE-2026-21452MessagePack for Java is a serializer implementation for Java…7.5
• CVE-2026-2146A security flaw has been discovered in guchengwuyue yshopmal…8.8
• CVE-2026-2148A security vulnerability has been detected in Tenda AC21 16.…7.5
• CVE-2026-21483listmonk is a standalone, self-hosted, newsletter and mailin…5.4
• CVE-2026-21484AnythingLLM is an application that turns pieces of content i…5.3
• CVE-2026-21485iccDEV provides a set of libraries and tools for working wit…8.8
• CVE-2026-21486iccDEV provides a set of libraries and tools for working wit…7.8
• CVE-2026-21487iccDEV provides a set of libraries and tools for working wit…7.1