A vulnerability described as critical has been identified in Tenda F3 and N300. Impacted is an unknown function of the component Web-based Administrative Interface. Such manipulation leads to cookie without ‘httponly’ flag.
This vulnerability is listed as CVE-2026-22081. The attack may be performed from remote. There is no available exploit.
