Shenzhen Tenda Technology Co., Ltd. Tenda AC7 vulnerabilities

4 vulnerabilities

Known vulnerabilities in Shenzhen Tenda Technology Co., Ltd. Tenda AC7, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.2HighCVE-2026-24441shenzhen tenda technology co., ltd. · tenda ac7 +1 moreTenda AC7 Transmits Admin Credentials Without HTTPS ProtectionShenzhen Tenda AC7 firmware version V03.03.03.01_cn and prior expose account credentials in plaintext within HTTP responses, allowing an on-path attacker to obtain sensitive authentication material.EPSS0.23%6.8MediumCVE-2026-24427shenzhen tenda technology co., ltd. · tenda ac7 +1 moreTenda AC7 Exposes Admin Credentials in Configuration ResponsesShenzhen Tenda AC7 firmware version V03.03.03.01_cn and prior expose sensitive information in web management responses. Administrative credentials, including the router and/or admin panel password, are included in plaintext within configuration response bodies. In addition, responses lack appropriate Cache-Control directives, which may permit web browsers to cache pages containing these credentials and enable subsequent disclosure to an attacker with access to the client system or browser profile.EPSS0.14%6.5MediumCVE-2026-24434shenzhen tenda technology co., ltd. · tenda ac7 +1 moreTenda AC7 Web Interface Lacks CSRF Protections for Admin ActionsShenzhen Tenda AC7 firmware version V03.03.03.01_cn and prior does not implement CSRF protections for administrative functions in the web management interface. The interface does not enforce anti-CSRF tokens or robust origin validation, which can allow an attacker to induce a logged-in administrator to perform unintended state-changing requests and modify router settings.EPSS0.17%6.1MediumCVE-2026-24426shenzhen tenda technology co., ltd. · tenda ac7 +1 moreTenda AC7 Reflected XSS via Web Interface Output EncodingShenzhen Tenda AC7 firmware version V03.03.03.01_cn and prior contain an improper output encoding vulnerability in the web management interface. User-supplied input is reflected in HTTP responses without adequate escaping, allowing injection of arbitrary HTML or JavaScript in a victim’s browser context.EPSS0.22%