Advisories · Technology

Shenzhen Tenda Technology Co., Ltd. Tenda AC7.

Every CVE that names Shenzhen Tenda Technology Co., Ltd. Tenda AC7 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-24441 CVE record

CVSS 8.2 High

Tenda AC7 Transmits Admin Credentials Without HTTPS Protection
- Shenzhen Tenda Technology Co., Ltd. Tenda AC7
- Weak cryptography or TLS
Not analysed yet 3 Feb 2026
CVE-2026-24434 CVE record

CVSS 5.1 Medium

Tenda AC7 Web Interface Lacks CSRF Protections for Admin Actions
- Shenzhen Tenda Technology Co., Ltd. Tenda AC7
- Cross-site request forgery (CSRF)
Not analysed yet 3 Feb 2026
CVE-2026-24427 CVE record

CVSS 6.8 Medium

Tenda AC7 Exposes Admin Credentials in Configuration Responses
- Shenzhen Tenda Technology Co., Ltd. Tenda AC7
- Information disclosure
Not analysed yet 3 Feb 2026
CVE-2026-24426 CVE record

CVSS 5.1 Medium

Tenda AC7 Reflected XSS via Web Interface Output Encoding
- Shenzhen Tenda Technology Co., Ltd. Tenda AC7
- Cross-site scripting (XSS)
Not analysed yet 3 Feb 2026