Vulnerabilities CVE-2026-19924

CVE-2026-19924

Critical

Open

TLP:CLEAR

Tenda AC10 httpd R7WebsSecurityHandler improper authentication

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

A security vulnerability has been detected in Tenda AC10 16.03.10.09_multi_TDE01. This vulnerability affects the function R7WebsSecurityHandler of the component httpd. The manipulation leads to improper authentication. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used.

Details

CVSS Score: 9.3
CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
Confidence: 90%
Published: Aug 16, 2026
Last Modified: Aug 16, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.