A vulnerability was found in Tenda F453 up to 1.0.0.3. It has been declared as critical. Impacted is the function TendaTelnet of the file /goform/telnet of the component Telnet Service. Such manipulation leads to command injection.

This vulnerability is referenced as CVE-2026-6989. It is possible to launch the attack remotely. Furthermore, an exploit is available.