High · published January 13, 2026
🚨 An unauthenticated attacker can wreak havoc on Tongyu AX1800 routers with just one active admin session! ⚡ Think of it like a party where someone sneaks in through the kitchen while everyone else is distracted — as long as the chef is busy, they can change the entire menu without anyone noticing! This vulnerability allows attackers to make arbitrary configuration changes on your router, leading to potential full compromise of the device. Imagine someone hijacking your Wi-Fi network, redirecting traffic, or even spying on your personal data! That's absolutely devastating for your security!
Think of it like a party where someone sneaks in through the kitchen while everyone else is distracted — as long as the chef is busy, they can change the entire menu without anyone noticing! The Tongyu AX1800 Wi-Fi 6 Router has an authentication bypass vulnerability that lets network-adjacent attackers perform configuration changes without credentials, provided a valid admin session is still active. This includes accessing sensitive endpoints like /boaform/formSaveConfig and /boaform/admin.
This vulnerability allows attackers to make arbitrary configuration changes on your router, leading to potential full compromise of the device. Imagine someone hijacking your Wi-Fi network, redirecting traffic, or even spying on your personal data! That's absolutely devastating for your security! To protect your network, immediately update your router's firmware to the latest version available. Ensure that no admin sessions remain active when not in use, and consider implementing network segmentation to limit access. Regularly check for updates and any security patches. You've got this! Follow these steps, and you'll have your router secured in no time! 🛡️