Unverified50% confidenceFactExact time
认证后门漏洞因攻击者无需前置权限、无需用户交互即可利用，在CVSS 3.x中通常被评为9.8分的严重等级
1
Sources
50%
Confidence
Long-term
Relevance
7/9/2026
First Seen
Sources
Hidden Authentication Backdoor Exposed in Tenda Router Firmware: Multiple Versions Affected, Users Beware
hackernewshackernews7/8/2026
Related Claims
UnverifiedCVSS（通用漏洞评分系统）由FIRST组织维护，目前主流版本为CVSS 3.1，评分低于4.0的漏洞被归类为低危74% similarUnverifiedThe CVSS Common Vulnerability Scoring System classifies vulnerability severity into four levels: low, medium, high, and critical.69% similarUnverifiedQR code access carries security risks including replay attacks, session credential leakage due to long-lived tokens, and man-in-the-middle attacks.67% similarUnverified多因素身份验证（MFA）在认证层面增加第二道防线，即便凭证泄露，攻击者也无法仅凭账号密码完成身份验证66% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/349457API
curl https://kongchang.com/api/v1/knowledge/claims/349457MCP
get_claim(id=349457)