CVE-2026-27512

Tenda F3 Reflected Script Execution via Missing nosniff Header

State: Published
Severity: 5.1 Medium
Published: Feb 23, 2026
Updated: May 25, 2026
Reserved: Feb 19, 2026

Description

Shenzhen Tenda F3 Wireless Router firmware V12.01.01.55_multi contains a content-type confusion vulnerability in the administrative interface. Responses omit the X-Content-Type-Options: nosniff header and include attacker-influenced content that can be reflected into the response body. Under affected browser behaviors, MIME sniffing may cause the response to be interpreted as active HTML, enabling script execution in the context of the administrative interface.

Scores

CVSS	Score	Vector	Source
4.0	5.1 Medium	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N	VulnCheck
3.1	6.1 Medium	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	VulnCheck

Weaknesses

CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')
CWE-116 Improper Encoding or Escaping of Output

Affected Products

Product	Versions
Tenda F3Shenzhen Tenda Technology Co., Ltd.	12.01.01.55_multi and earlierAffected

References

https://www.tendacn.com/product/F3product
https://www.vulncheck.com/advisories/tenda-f3-reflected-script-execution-via-missing-nosniff-headerthird-party-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.