CVE-2026-7469 | Tenda 4G300 US_4G300V1.0Mt_V1.01.42_CN_TDC01 /goform/DelFil sub_425A28 delflag command injection

A vulnerability described as critical has been identified in Tenda 4G300 US_4G300V1.0Mt_V1.01.42_CN_TDC01. This impacts the function sub_425A28 of the file /goform/DelFil. The manipulation of the argument delflag results in command injection.

This vulnerability is cataloged as CVE-2026-7469. The attack may be launched remotely. Furthermore, there is an exploit available.