CVE-2026-19924
CriticalCVSS 9.8Summary
A vulnerability has been detected in the Tenda AC10 router version 16.03.10.09_multi_TDE01. It affects the R7WebsSecurityHandler function in the httpd component, leading to improper authentication. The attack can be initiated remotely, and the exploit has been publicly disclosed.
Risk Assessment
A remote attacker can exploit improper authentication to gain unauthorized access to the router, potentially leading to full control over the device and network.
Recommendation
Update the router firmware to the latest version if available. Restrict access to the admin panel and change default passwords.
Original NVD description (English source)
A security vulnerability has been detected in Tenda AC10 16.03.10.09_multi_TDE01. This vulnerability affects the function R7WebsSecurityHandler of the component httpd. The manipulation leads to improper authentication. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used.