Vulnerability Description
This vulnerability exists in Tenda wireless routers (300Mbps Wireless Router F3 and N300 Easy Setup Router) due to the missing HTTPOnly flag for session cookies associated with the web-based administrative interface. A remote at-tacker could exploit this vulnerability by capturing session cookies transmitted over an insecure HTTP connection. Successful exploitation of this vulnerability could allow the attacker to obtain sensitive information and gain unau-thorized access to the targeted device.
Related Weaknesses (CWE)
References
FAQ
What is CVE-2026-22081?
CVE-2026-22081 is a documented vulnerability. This vulnerability exists in Tenda wireless routers (300Mbps Wireless Router F3 and N300 Easy Setup Router) due to the missing HTTPOnly flag for session cookies associated with the web-based administr...
How severe is CVE-2026-22081?
CVSS scoring is not yet available for CVE-2026-22081. Check NVD for updates.
Is there a patch for CVE-2026-22081?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.