24276 matches found
CVE-2026-19747
The CVE-2026-19747 entry identifies a vulnerability in Tenda devices (CH7, CH7G, CH10, CP3, CP3 Pro, CP7, TC3B14C, TC3B15C, TC3T14C, TC3T15C) affecting the ATE Module’s Kylin component, specifically the CAte::HandleCmd function. This manipulation enables remote command injection, implying a netwo...
EUVD-2026-58370
A weakness has been identified in Tenda CH7, CH7G, CH10, CP3, CP3 Pro, CP7, TC3B14C, TC3B15C, TC3T14C and TC3T15C up to 20260625. This impacts the function CAte::HandleCmd of the file Kylin of the component ATE Module. This manipulation causes command injection. The attack is possible to be carri...
PT-2026-71830
Name of the Vulnerable Software and Affected Versions Tenda CH7 versions prior to 20260625 Tenda CH7G versions prior to 20260625 Tenda CH10 versions prior to 20260625 Tenda CP3 versions prior to 20260625 Tenda CP3 Pro versions prior to 20260625 Tenda CP7 versions prior to 20260625 Tenda TC3B14C...
CVE-2026-19747: Improper Neutralization of Special Elements used in a Command
A weakness has been identified in Tenda CH7, CH7G, CH10, CP3, CP3 Pro, CP7, TC3B14C, TC3B15C, TC3T14C and TC3T15C up to 20260625. This impacts the function CAte::HandleCmd of the file Kylin of the component ATE Module. This manipulation causes command injection. The attack is possible to be carri...
CVE-2026-19750: Use of Hard-coded Password
A flaw has been found in Tenda CH, CP and TX3 V21.x/V22.x/V25.x/V26.x/V27.x. Affected by this issue is some unknown functionality of the component SSH. Executing a manipulation can lead to use of hard-coded password. It is possible to launch the attack remotely. The attack requires a high level o...
CVE-2026-19749: Missing Authentication for Critical Function
A vulnerability was detected in Tenda CH7, CH7G, CH10, CP3, CP3 Pro, CP7, TC3B14C, TC3B15C, TC3T14C and TC3T15C up to 20260625. Affected by this vulnerability is an unknown functionality of the component RTSP/ONVIF. Performing a manipulation results in missing authentication. It is possible to...
CVE-2026-19748: Insufficient Entropy
A security vulnerability has been detected in Tenda CH7, CH7G, CH10, CP3, CP3 Pro, CP7, TC3B14C, TC3B15C, TC3T14C and TC3T15C up to 20260625. Affected is the function CWebSessionManagerParseSession of the file /user/bin/Kylin of the component Kylin Web Service. Such manipulation of the argument...
PT-2026-71869
Name of the Vulnerable Software and Affected Versions Tenda CH7 versions prior to 20260625 Tenda CH7G versions prior to 20260625 Tenda CH10 versions prior to 20260625 Tenda CP3 versions prior to 20260625 Tenda CP3 Pro versions prior to 20260625 Tenda CP7 versions prior to 20260625 Tenda TC3B14C...
PT-2026-71831
A security vulnerability has been detected in Tenda CH7, CH7G, CH10, CP3, CP3 Pro, CP7, TC3B14C, TC3B15C, TC3T14C and TC3T15C up to 20260625. Affected is the function CWebSessionManager ParseSession of the file /user/bin/Kylin of the component Kylin Web Service. Such manipulation of the argument...
PT-2026-71873
A flaw has been found in Tenda CH, CP and TX3 V21.x/V22.x/V25.x/V26.x/V27.x. Affected by this issue is some unknown functionality of the component SSH. Executing a manipulation can lead to use of hard-coded password. It is possible to launch the attack remotely. The attack requires a high level o...
The vulnerability of the formCertListInfo() function in the /goform/CertListInfo file of the Tenda CH22 router microprogramming system, which allows a hacker to execute arbitrary commands.
The vulnerability of the formCertListInfo function in the /goform/CertListInfo file of the Tenda CH22 router microsystem is related to the failure to take measures to neutralize special elements. Exploiting this vulnerability could allow a remote attacker to execute arbitrary commands...
CVE-2026-19346
A vulnerability was determined in Tenda CH22 1.0.0.1. This vulnerability affects the function formCertListInfo of the file /goform/CertListInfo. This manipulation of the argument Name causes command injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may b...
EUVD-2026-54915
A vulnerability was determined in Tenda CH22 1.0.0.1. This vulnerability affects the function formCertListInfo of the file /goform/CertListInfo. This manipulation of the argument Name causes command injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may b...
CVE-2026-19346
A vulnerability was determined in Tenda CH22 1.0.0.1. This vulnerability affects the function formCertListInfo of the file /goform/CertListInfo. This manipulation of the argument Name causes command injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may b...
CVE-2026-19346 Tenda CH22 CertListInfo formCertListInfo command injection
A vulnerability was determined in Tenda CH22 1.0.0.1. This vulnerability affects the function formCertListInfo of the file /goform/CertListInfo. This manipulation of the argument Name causes command injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may b...
CVE-2026-19346 Tenda CH22 CertListInfo formCertListInfo command injection
A vulnerability was determined in Tenda CH22 1.0.0.1. This vulnerability affects the function formCertListInfo of the file /goform/CertListInfo. This manipulation of the argument Name causes command injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may b...
CVE-2026-19346
CVE-2026-19346 affects Tenda CH22 firmware 1.0.0.1. The vulnerability is in the formCertListInfo function of /goform/CertListInfo, where manipulating the Name argument can trigger remote command injection. Exploitation is described as remote and has been publicly disclosed. CVSS metrics indicate ...
CVE-2026-19346: Improper Neutralization of Special Elements used in a Command
A vulnerability was determined in Tenda CH22 1.0.0.1. This vulnerability affects the function formCertListInfo of the file /goform/CertListInfo. This manipulation of the argument Name causes command injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may b...
PT-2026-69288
Name of the Vulnerable Software and Affected Versions Tenda CH22 version 1.0.0.1 Description A remote command injection issue exists in the /goform/CertListInfo endpoint. The flaw occurs within the formCertListInfo function when processing the Name argument, allowing an attacker to execute...
