EIP-2026-100586

This PoC exploits a cookie session weakness in Tenda W316R routers to remotely change DNS settings via an unauthenticated HTTP request. The attack leverages a direct request to the router's configuration endpoint to modify DNS servers.