LeakyCreds
NewInstant webhook alerts now available ā€” notified within seconds of any credential detection.Learn more ā†’
Home / Vulnerability Intelligence / CVE-2026-21668

CVE-2026-21668 - Vulnerability Analysis

HighCVSS: 8.8

Last Updated: March 12, 2026

Backup Repository - Broken Access Control

Published: March 12, 2026Updated: March 12, 2026Remote Exploitable

Overview

Backup Repository contains a broken access control vulnerability caused by insufficient restriction enforcement, letting authenticated domain users manipulate arbitrary files.

Severity & Score

Severity: High
CVSS Score: 8.8
EPSS Score: 3.9%(Probability of exploitation in next 30 days)

Impact

Authenticated domain users can manipulate arbitrary files, potentially leading to data tampering or system compromise.

Mitigation

Update to the latest version with access control fixes.

References

Social Media Activity(4 posts)

TheHackerWire
TheHackerWire
@thehackerwire
Mar 12, 2026

šŸŸ  CVE-2026-21668 - High (8.8) A vulnerability allowing an authenticated domain user to bypass restrictions and manipulate arbitrary files on a Backup Repository. šŸ”— https://www.thehackerwire.com/vulnerability/CVE-2026-21668/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post
TheHackerWire
TheHackerWire
@thehackerwire
Mar 12, 2026

šŸŸ  CVE-2026-21668 - High (8.8) A vulnerability allowing an authenticated domain user to bypass restrictions and manipulate arbitrary files on a Backup Repository. šŸ”— https://www.thehackerwire.com/vulnerability/CVE-2026-21668/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post
TheHackerWire
TheHackerWire
@thehackerwire
Mar 12, 2026

šŸŸ  CVE-2026-21668 - High (8.8) A vulnerability allowing an authenticated domain user to bypass restrictions and manipulate arbitrary files on a Backup Repository. šŸ”— https://www.thehackerwire.com/vulnerability/CVE-2026-21668/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post
TheHackerWire
TheHackerWire
@thehackerwire
Mar 12, 2026

šŸŸ  CVE-2026-21668 - High (8.8) A vulnerability allowing an authenticated domain user to bypass restrictions and manipulate arbitrary files on a Backup Repository. šŸ”— https://www.thehackerwire.com/vulnerability/CVE-2026-21668/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Related Resources

Details

CVE ID
CVE-2026-21668
Severity
High
CVSS Score
8.8
Type
broken_access_control
Status
unconfirmed
EPSS
3.9%
Social Posts
4

CVSS Metrics

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Score

3.9%Probability of exploitation in the next 30 days