CVE-2026-27514

CVE-2026-27514 describes a sensitive information exposure vulnerability in the configuration download functionality of Shenzhen Tenda F3 Wireless Router firmware V12.01.01.55_multi. This flaw allows an authenticated attacker to retrieve the router and administrative passwords in plaintext, as the configuration download response lacks proper Cache-Control directives, potentially exposing credentials through client-side caches. Rated with a CVSS score of 6.5 (Medium), the vulnerability has a network attack vector and low attack complexity, meaning an attacker with legitimate access to the router's web interface can easily exploit it to gain full administrative control. The primary impact is high confidentiality, as sensitive authentication data is exposed. There is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, indicating a low level of public awareness or attention at this time.