Refine your search
3 vulnerabilities found for CH7G by Tenda
CVE-2026-19749 (GCVE-0-2026-19749)
Vulnerability from cvelistv5
Published
2026-08-13 20:45
Modified
2026-08-18 01:38
Severity ?
VLAI Severity ?
EPSS score ?
Summary
A vulnerability was detected in Tenda CH7, CH7G, CH10, CP3, CP3 Pro, CP7, TC3B14C, TC3B15C, TC3T14C and TC3T15C up to 20260625. Affected by this vulnerability is an unknown functionality of the component RTSP/ONVIF. Performing a manipulation results in missing authentication. It is possible to initiate the attack remotely. The attack is considered to have high complexity. The exploitation appears to be difficult. The exploit is now public and may be used.
References
| URL | Tags | |||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||||||||
Impacted products
| Vendor | Product | Version | |||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Tenda | CH7 |
Version: 20260625 cpe:2.3:h:tenda:ch7:*:*:*:*:*:*:*:* |
|||||||||||||||||||||||||||||||||||||||||||||||
|
|||||||||||||||||||||||||||||||||||||||||||||||||
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-19749",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-18T01:37:31.729628Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-18T01:38:04.851Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"references": [
{
"tags": [
"exploit"
],
"url": "https://github.com/howitouchyou/Tenda-Smart-Camera-Vulnerability/blob/main/Tenda%20RTSP_ONVIF%20Auth%20Bypass/Tenda%20RTSP_ONVIF%20Auth%20Bypass.md"
}
],
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:h:tenda:ch7:*:*:*:*:*:*:*:*"
],
"modules": [
"RTSP/ONVIF"
],
"product": "CH7",
"vendor": "Tenda",
"versions": [
{
"status": "affected",
"version": "20260625"
}
]
},
{
"cpes": [
"cpe:2.3:h:tenda:ch7g:*:*:*:*:*:*:*:*"
],
"modules": [
"RTSP/ONVIF"
],
"product": "CH7G",
"vendor": "Tenda",
"versions": [
{
"status": "affected",
"version": "20260625"
}
]
},
{
"cpes": [
"cpe:2.3:h:tenda:ch10:*:*:*:*:*:*:*:*"
],
"modules": [
"RTSP/ONVIF"
],
"product": "CH10",
"vendor": "Tenda",
"versions": [
{
"status": "affected",
"version": "20260625"
}
]
},
{
"cpes": [
"cpe:2.3:h:tenda:cp3:*:*:*:*:*:*:*:*"
],
"modules": [
"RTSP/ONVIF"
],
"product": "CP3",
"vendor": "Tenda",
"versions": [
{
"status": "affected",
"version": "20260625"
}
]
},
{
"cpes": [
"cpe:2.3:h:tenda:cp3_pro:*:*:*:*:*:*:*:*"
],
"modules": [
"RTSP/ONVIF"
],
"product": "CP3 Pro",
"vendor": "Tenda",
"versions": [
{
"status": "affected",
"version": "20260625"
}
]
},
{
"cpes": [
"cpe:2.3:h:tenda:cp7:*:*:*:*:*:*:*:*"
],
"modules": [
"RTSP/ONVIF"
],
"product": "CP7",
"vendor": "Tenda",
"versions": [
{
"status": "affected",
"version": "20260625"
}
]
},
{
"cpes": [
"cpe:2.3:h:tenda:tc3b14c:*:*:*:*:*:*:*:*"
],
"modules": [
"RTSP/ONVIF"
],
"product": "TC3B14C",
"vendor": "Tenda",
"versions": [
{
"status": "affected",
"version": "20260625"
}
]
},
{
"cpes": [
"cpe:2.3:h:tenda:tc3b15c:*:*:*:*:*:*:*:*"
],
"modules": [
"RTSP/ONVIF"
],
"product": "TC3B15C",
"vendor": "Tenda",
"versions": [
{
"status": "affected",
"version": "20260625"
}
]
},
{
"cpes": [
"cpe:2.3:h:tenda:tc3t14c:*:*:*:*:*:*:*:*"
],
"modules": [
"RTSP/ONVIF"
],
"product": "TC3T14C",
"vendor": "Tenda",
"versions": [
{
"status": "affected",
"version": "20260625"
}
]
},
{
"cpes": [
"cpe:2.3:h:tenda:tc3t15c:*:*:*:*:*:*:*:*"
],
"modules": [
"RTSP/ONVIF"
],
"product": "TC3T15C",
"vendor": "Tenda",
"versions": [
{
"status": "affected",
"version": "20260625"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "Howitouchyou (VulDB User)"
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was detected in Tenda CH7, CH7G, CH10, CP3, CP3 Pro, CP7, TC3B14C, TC3B15C, TC3T14C and TC3T15C up to 20260625. Affected by this vulnerability is an unknown functionality of the component RTSP/ONVIF. Performing a manipulation results in missing authentication. It is possible to initiate the attack remotely. The attack is considered to have high complexity. The exploitation appears to be difficult. The exploit is now public and may be used."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:W/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:W/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 2.6,
"vectorString": "AV:N/AC:H/Au:N/C:P/I:N/A:N/E:POC/RL:W/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-306",
"description": "Missing Authentication",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-287",
"description": "Improper Authentication",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-13T20:45:09.628Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-389500 | Tenda CH7 RTSP/ONVIF missing authentication",
"tags": [
"vdb-entry"
],
"url": "https://vuldb.com/vuln/389500"
},
{
"name": "VDB-389500 | CTI Indicators (IOB, IOC)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/389500/cti"
},
{
"name": "CVE-2026-19749 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-19749"
},
{
"name": "Submit #868503 | Tenda Tenda Multiple IP Cameras Multiple Versions Missing Authentication",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/868503"
},
{
"tags": [
"related"
],
"url": "https://github.com/howitouchyou/Tenda-Smart-Camera-Vulnerability/blob/main/Tenda%20RTSP_ONVIF%20Auth%20Bypass/Tenda%20RTSP_ONVIF%20Auth%20Bypass.md"
},
{
"tags": [
"product"
],
"url": "https://www.tenda.com.cn/"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-08-13T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-08-13T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-08-13T16:44:54.000Z",
"value": "VulDB entry last update"
}
],
"title": "Tenda CH7 RTSP/ONVIF missing authentication",
"x_generator": [
"VulDB PVTS v202608"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-19749",
"datePublished": "2026-08-13T20:45:09.628Z",
"dateReserved": "2026-08-13T14:39:36.955Z",
"dateUpdated": "2026-08-18T01:38:04.851Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-19748 (GCVE-0-2026-19748)
Vulnerability from cvelistv5
Published
2026-08-13 20:15
Modified
2026-08-14 16:44
Severity ?
VLAI Severity ?
EPSS score ?
Summary
A security vulnerability has been detected in Tenda CH7, CH7G, CH10, CP3, CP3 Pro, CP7, TC3B14C, TC3B15C, TC3T14C and TC3T15C up to 20260625. Affected is the function CWebSessionManager_ParseSession of the file /user/bin/Kylin of the component Kylin Web Service. Such manipulation of the argument SESSION leads to insufficient entropy. The attack may be performed from remote. Attacks of this nature are highly complex. The exploitability is told to be difficult.
References
| URL | Tags | |||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||||||||
Impacted products
| Vendor | Product | Version | |||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Tenda | CH7 |
Version: 20260625 cpe:2.3:h:tenda:ch7:*:*:*:*:*:*:*:* |
|||||||||||||||||||||||||||||||||||||||||||||||
|
|||||||||||||||||||||||||||||||||||||||||||||||||
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-19748",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-14T16:43:42.535144Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-14T16:44:13.929Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"references": [
{
"tags": [
"exploit"
],
"url": "https://github.com/howitouchyou/Tenda-Smart-Camera-Vulnerability/blob/main/Tenda%20Weak%20Bypass/Tenda%20Camera%20Weak%20Session%20Authentication%20Bypass.md"
}
],
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:h:tenda:ch7:*:*:*:*:*:*:*:*"
],
"modules": [
"Kylin Web Service"
],
"product": "CH7",
"vendor": "Tenda",
"versions": [
{
"status": "affected",
"version": "20260625"
}
]
},
{
"cpes": [
"cpe:2.3:h:tenda:ch7g:*:*:*:*:*:*:*:*"
],
"modules": [
"Kylin Web Service"
],
"product": "CH7G",
"vendor": "Tenda",
"versions": [
{
"status": "affected",
"version": "20260625"
}
]
},
{
"cpes": [
"cpe:2.3:h:tenda:ch10:*:*:*:*:*:*:*:*"
],
"modules": [
"Kylin Web Service"
],
"product": "CH10",
"vendor": "Tenda",
"versions": [
{
"status": "affected",
"version": "20260625"
}
]
},
{
"cpes": [
"cpe:2.3:h:tenda:cp3:*:*:*:*:*:*:*:*"
],
"modules": [
"Kylin Web Service"
],
"product": "CP3",
"vendor": "Tenda",
"versions": [
{
"status": "affected",
"version": "20260625"
}
]
},
{
"cpes": [
"cpe:2.3:h:tenda:cp3_pro:*:*:*:*:*:*:*:*"
],
"modules": [
"Kylin Web Service"
],
"product": "CP3 Pro",
"vendor": "Tenda",
"versions": [
{
"status": "affected",
"version": "20260625"
}
]
},
{
"cpes": [
"cpe:2.3:h:tenda:cp7:*:*:*:*:*:*:*:*"
],
"modules": [
"Kylin Web Service"
],
"product": "CP7",
"vendor": "Tenda",
"versions": [
{
"status": "affected",
"version": "20260625"
}
]
},
{
"cpes": [
"cpe:2.3:h:tenda:tc3b14c:*:*:*:*:*:*:*:*"
],
"modules": [
"Kylin Web Service"
],
"product": "TC3B14C",
"vendor": "Tenda",
"versions": [
{
"status": "affected",
"version": "20260625"
}
]
},
{
"cpes": [
"cpe:2.3:h:tenda:tc3b15c:*:*:*:*:*:*:*:*"
],
"modules": [
"Kylin Web Service"
],
"product": "TC3B15C",
"vendor": "Tenda",
"versions": [
{
"status": "affected",
"version": "20260625"
}
]
},
{
"cpes": [
"cpe:2.3:h:tenda:tc3t14c:*:*:*:*:*:*:*:*"
],
"modules": [
"Kylin Web Service"
],
"product": "TC3T14C",
"vendor": "Tenda",
"versions": [
{
"status": "affected",
"version": "20260625"
}
]
},
{
"cpes": [
"cpe:2.3:h:tenda:tc3t15c:*:*:*:*:*:*:*:*"
],
"modules": [
"Kylin Web Service"
],
"product": "TC3T15C",
"vendor": "Tenda",
"versions": [
{
"status": "affected",
"version": "20260625"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "Howitouchyou (VulDB User)"
}
],
"descriptions": [
{
"lang": "en",
"value": "A security vulnerability has been detected in Tenda CH7, CH7G, CH10, CP3, CP3 Pro, CP7, TC3B14C, TC3B15C, TC3T14C and TC3T15C up to 20260625. Affected is the function CWebSessionManager_ParseSession of the file /user/bin/Kylin of the component Kylin Web Service. Such manipulation of the argument SESSION leads to insufficient entropy. The attack may be performed from remote. Attacks of this nature are highly complex. The exploitability is told to be difficult."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 2.6,
"vectorString": "AV:N/AC:H/Au:N/C:P/I:N/A:N/E:POC/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-331",
"description": "Insufficient Entropy",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-330",
"description": "Insufficiently Random Values",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-13T20:15:10.451Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-389499 | Tenda CH7 Kylin Web Service CWebSessionManager_ParseSession entropy",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/389499"
},
{
"name": "VDB-389499 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/389499/cti"
},
{
"name": "CVE-2026-19748 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-19748"
},
{
"name": "Submit #868490 | Tenda Tenda Multiple IP Cameras Multiple Versions Authentication Bypass",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/868490"
},
{
"tags": [
"related"
],
"url": "https://github.com/howitouchyou/Tenda-Smart-Camera-Vulnerability/blob/main/Tenda%20Weak%20Bypass/Tenda%20Camera%20Weak%20Session%20Authentication%20Bypass.md"
},
{
"tags": [
"product"
],
"url": "https://www.tenda.com.cn/"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-08-13T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-08-13T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-08-13T16:44:51.000Z",
"value": "VulDB entry last update"
}
],
"title": "Tenda CH7 Kylin Web Service CWebSessionManager_ParseSession entropy",
"x_generator": [
"VulDB PVTS v202608"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-19748",
"datePublished": "2026-08-13T20:15:10.451Z",
"dateReserved": "2026-08-13T14:39:32.611Z",
"dateUpdated": "2026-08-14T16:44:13.929Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-19747 (GCVE-0-2026-19747)
Vulnerability from cvelistv5
Published
2026-08-13 19:45
Modified
2026-08-14 15:42
Severity ?
8.9 (High) - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RC:R
9.8 (Critical) - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RC:R
9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RC:R
9.8 (Critical) - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RC:R
VLAI Severity ?
EPSS score ?
Summary
A weakness has been identified in Tenda CH7, CH7G, CH10, CP3, CP3 Pro, CP7, TC3B14C, TC3B15C, TC3T14C and TC3T15C up to 20260625. This impacts the function CAte::HandleCmd of the file Kylin of the component ATE Module. This manipulation causes command injection. The attack is possible to be carried out remotely.
References
| URL | Tags | |||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||||||||
Impacted products
| Vendor | Product | Version | |||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Tenda | CH7 |
Version: 20260625 cpe:2.3:h:tenda:ch7:*:*:*:*:*:*:*:* |
|||||||||||||||||||||||||||||||||||||||||||||||
|
|||||||||||||||||||||||||||||||||||||||||||||||||
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-19747",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-14T15:09:40.891247Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-14T15:42:33.402Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"references": [
{
"tags": [
"exploit"
],
"url": "https://github.com/howitouchyou/Tenda-Smart-Camera-Vulnerability/blob/main/Tenda%20Command%20Injection/Tenda%20Command%20Injection.md"
}
],
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:h:tenda:ch7:*:*:*:*:*:*:*:*"
],
"modules": [
"ATE Module"
],
"product": "CH7",
"vendor": "Tenda",
"versions": [
{
"status": "affected",
"version": "20260625"
}
]
},
{
"cpes": [
"cpe:2.3:h:tenda:ch7g:*:*:*:*:*:*:*:*"
],
"modules": [
"ATE Module"
],
"product": "CH7G",
"vendor": "Tenda",
"versions": [
{
"status": "affected",
"version": "20260625"
}
]
},
{
"cpes": [
"cpe:2.3:h:tenda:ch10:*:*:*:*:*:*:*:*"
],
"modules": [
"ATE Module"
],
"product": "CH10",
"vendor": "Tenda",
"versions": [
{
"status": "affected",
"version": "20260625"
}
]
},
{
"cpes": [
"cpe:2.3:h:tenda:cp3:*:*:*:*:*:*:*:*"
],
"modules": [
"ATE Module"
],
"product": "CP3",
"vendor": "Tenda",
"versions": [
{
"status": "affected",
"version": "20260625"
}
]
},
{
"cpes": [
"cpe:2.3:h:tenda:cp3_pro:*:*:*:*:*:*:*:*"
],
"modules": [
"ATE Module"
],
"product": "CP3 Pro",
"vendor": "Tenda",
"versions": [
{
"status": "affected",
"version": "20260625"
}
]
},
{
"cpes": [
"cpe:2.3:h:tenda:cp7:*:*:*:*:*:*:*:*"
],
"modules": [
"ATE Module"
],
"product": "CP7",
"vendor": "Tenda",
"versions": [
{
"status": "affected",
"version": "20260625"
}
]
},
{
"cpes": [
"cpe:2.3:h:tenda:tc3b14c:*:*:*:*:*:*:*:*"
],
"modules": [
"ATE Module"
],
"product": "TC3B14C",
"vendor": "Tenda",
"versions": [
{
"status": "affected",
"version": "20260625"
}
]
},
{
"cpes": [
"cpe:2.3:h:tenda:tc3b15c:*:*:*:*:*:*:*:*"
],
"modules": [
"ATE Module"
],
"product": "TC3B15C",
"vendor": "Tenda",
"versions": [
{
"status": "affected",
"version": "20260625"
}
]
},
{
"cpes": [
"cpe:2.3:h:tenda:tc3t14c:*:*:*:*:*:*:*:*"
],
"modules": [
"ATE Module"
],
"product": "TC3T14C",
"vendor": "Tenda",
"versions": [
{
"status": "affected",
"version": "20260625"
}
]
},
{
"cpes": [
"cpe:2.3:h:tenda:tc3t15c:*:*:*:*:*:*:*:*"
],
"modules": [
"ATE Module"
],
"product": "TC3T15C",
"vendor": "Tenda",
"versions": [
{
"status": "affected",
"version": "20260625"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "Howitouchyou (VulDB User)"
}
],
"descriptions": [
{
"lang": "en",
"value": "A weakness has been identified in Tenda CH7, CH7G, CH10, CP3, CP3 Pro, CP7, TC3B14C, TC3B15C, TC3T14C and TC3T15C up to 20260625. This impacts the function CAte::HandleCmd of the file Kylin of the component ATE Module. This manipulation causes command injection. The attack is possible to be carried out remotely."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 9.3,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 10,
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C/E:POC/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-77",
"description": "Command Injection",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-74",
"description": "Injection",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-13T19:45:09.236Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-389498 | Tenda CH7 ATE Module Kylin HandleCmd command injection",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/389498"
},
{
"name": "VDB-389498 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/389498/cti"
},
{
"name": "CVE-2026-19747 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-19747"
},
{
"name": "Submit #868463 | Tenda Tenda Multiple IP Cameras Multiple Versions Command Injection",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/868463"
},
{
"tags": [
"related"
],
"url": "https://github.com/howitouchyou/Tenda-Smart-Camera-Vulnerability/blob/main/Tenda%20Command%20Injection/Tenda%20Command%20Injection.md"
},
{
"tags": [
"product"
],
"url": "https://www.tenda.com.cn/"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-08-13T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-08-13T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-08-13T16:44:47.000Z",
"value": "VulDB entry last update"
}
],
"title": "Tenda CH7 ATE Module Kylin HandleCmd command injection",
"x_generator": [
"VulDB PVTS v202608"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-19747",
"datePublished": "2026-08-13T19:45:09.236Z",
"dateReserved": "2026-08-13T14:39:28.581Z",
"dateUpdated": "2026-08-14T15:42:33.402Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}