CVEPublished 2026-06-08Modified 2026-06-080 articles on news6 live referencesNVD data

CVE-2026-11493

Vulnerability data via NVD (ingested)

CVSS v3.1
5.0
MEDIUM
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
EPSS percentile
Description

A weakness has been identified in Tenda AC15 15.03.05.19. The impacted element is an unknown function of the file /etc_ro/smb.conf of the component Samba. Executing a manipulation can lead to weak password requirements. The attack is only possible within the local network. A high complexity level is associated with this attack. The exploitability is regarded as difficult. The exploit has been made available to the public and could be used for attacks.

Timeline
Published 2026-06-08
Modified 2026-06-08

External references

Search for exposed instances

Shodan + Censys queries derived from NVD's CPE data. The vuln tag catches assets Shodan has explicitly linked to this CVE; the product / banner fingerprints find exposed instances even when the vuln tag was never applied (which is common).

More intel sources (5)

Known PoCs on GitHub

No public proof-of-concept repositories found for CVE-2026-11493 on GitHub.
We haven't classified any articles referencing CVE-2026-11493 yet. The external references above still apply.