[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-19924":6},{"stargazers_count":4,"fetched_at":5},7,"2026-08-16T04:37:15.920Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":660,"aliases":670,"duplicate_of":9,"upstream":671,"downstream":672,"duplicates":673,"related":674,"reserved_at":9,"published_at":675,"modified_at":675,"state":676,"summary":677,"references_raw":683,"kevs":716,"epss":9,"epss_history":717,"metrics":718,"affected":739},"CVE-2026-19924","A security vulnerability has been detected in Tenda AC10 16.03.10.09_multi_TDE01. This vulnerability affects the function R7WebsSecurityHandler of the component httpd. The manipulation leads to improper authentication. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-287","Improper Authentication","When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.","weakness","Draft","Class","High",[20,182,261,265,269,273,292,481,543,627],{"id":21,"name":22,"techniques":23},"CAPEC-114","Authentication Abuse",[24],{"id":25,"name":26,"tactics":27,"countermeasures":34},"T1548","Abuse Elevation Control Mechanism",[28,31],{"id":29,"name":30},"TA0030","Defense Evasion",{"id":32,"name":33},"TA0111","Privilege Escalation",[35,40,45,50,55,59,63,67,72,76,80,84,88,92,96,100,104,109,113,117,121,126,130,134,138,142,146,150,154,158,162,166,170,174,178],{"id":36,"name":37,"tactic":38},"D3-CM","Content Modification",{"name":39},"Isolate",{"id":41,"name":42,"tactic":43},"D3-AEM","Application Exception Monitoring",{"name":44},"Detect",{"id":46,"name":47,"tactic":48},"D3-DF","Decoy File",{"name":49},"Deceive",{"id":51,"name":52,"tactic":53},"D3-CI","Configuration Inventory",{"name":54},"Model",{"id":56,"name":57,"tactic":58},"D3-SCA","System Call Analysis",{"name":44},{"id":60,"name":61,"tactic":62},"D3-SFA","System File Analysis",{"name":44},{"id":64,"name":65,"tactic":66},"D3-FA","File Analysis",{"name":44},{"id":68,"name":69,"tactic":70},"D3-FE","File Encryption",{"name":71},"Harden",{"id":73,"name":74,"tactic":75},"D3-AA","Agent Authentication",{"name":71},{"id":77,"name":78,"tactic":79},"D3-CDP","Change Default Password",{"name":71},{"id":81,"name":82,"tactic":83},"D3-AM","Access Modeling",{"name":54},{"id":85,"name":86,"tactic":87},"D3-DI","Data Inventory",{"name":54},{"id":89,"name":90,"tactic":91},"D3-NTPM","Network Traffic Policy Mapping",{"name":54},{"id":93,"name":94,"tactic":95},"D3-PSA","Process Spawn Analysis",{"name":44},{"id":97,"name":98,"tactic":99},"D3-SCP","System Configuration Permissions",{"name":71},{"id":101,"name":102,"tactic":103},"D3-FIM","File Integrity Monitoring",{"name":44},{"id":105,"name":106,"tactic":107},"D3-RC","Restore Configuration",{"name":108},"Restore",{"id":110,"name":111,"tactic":112},"D3-RF","Restore File",{"name":108},{"id":114,"name":115,"tactic":116},"D3-ULA","Unlock Account",{"name":108},{"id":118,"name":119,"tactic":120},"D3-RUAA","Restore User Account Access",{"name":108},{"id":122,"name":123,"tactic":124},"D3-FEV","File Eviction",{"name":125},"Evict",{"id":127,"name":128,"tactic":129},"D3-RD","Restore Database",{"name":108},{"id":131,"name":132,"tactic":133},"D3-AL","Account Locking",{"name":125},{"id":135,"name":136,"tactic":137},"D3-OPM","Operational Process Monitoring",{"name":44},{"id":139,"name":140,"tactic":141},"D3-DA","Dynamic Analysis",{"name":44},{"id":143,"name":144,"tactic":145},"D3-EFA","Emulated File Analysis",{"name":44},{"id":147,"name":148,"tactic":149},"D3-SCF","System Call Filtering",{"name":39},{"id":151,"name":152,"tactic":153},"D3-CF","Content Filtering",{"name":39},{"id":155,"name":156,"tactic":157},"D3-LFP","Local File Permissions",{"name":39},{"id":159,"name":160,"tactic":161},"D3-RFAM","Remote File Access Mediation",{"name":39},{"id":163,"name":164,"tactic":165},"D3-CQ","Content Quarantine",{"name":39},{"id":167,"name":168,"tactic":169},"D3-UAP","User Account Permissions",{"name":39},{"id":171,"name":172,"tactic":173},"D3-HBPI","Hardware-based Process Isolation",{"name":39},{"id":175,"name":176,"tactic":177},"D3-EAL","Executable Allowlisting",{"name":39},{"id":179,"name":180,"tactic":181},"D3-EDL","Executable Denylisting",{"name":39},{"id":183,"name":184,"techniques":185},"CAPEC-115","Authentication Bypass",[186],{"id":25,"name":26,"tactics":187,"countermeasures":190},[188,189],{"id":29,"name":30},{"id":32,"name":33},[191,193,195,197,199,201,203,205,207,209,211,213,215,217,219,221,223,225,227,229,231,233,235,237,239,241,243,245,247,249,251,253,255,257,259],{"id":36,"name":37,"tactic":192},{"name":39},{"id":41,"name":42,"tactic":194},{"name":44},{"id":46,"name":47,"tactic":196},{"name":49},{"id":51,"name":52,"tactic":198},{"name":54},{"id":56,"name":57,"tactic":200},{"name":44},{"id":60,"name":61,"tactic":202},{"name":44},{"id":64,"name":65,"tactic":204},{"name":44},{"id":68,"name":69,"tactic":206},{"name":71},{"id":73,"name":74,"tactic":208},{"name":71},{"id":77,"name":78,"tactic":210},{"name":71},{"id":81,"name":82,"tactic":212},{"name":54},{"id":85,"name":86,"tactic":214},{"name":54},{"id":89,"name":90,"tactic":216},{"name":54},{"id":93,"name":94,"tactic":218},{"name":44},{"id":97,"name":98,"tactic":220},{"name":71},{"id":101,"name":102,"tactic":222},{"name":44},{"id":105,"name":106,"tactic":224},{"name":108},{"id":110,"name":111,"tactic":226},{"name":108},{"id":114,"name":115,"tactic":228},{"name":108},{"id":118,"name":119,"tactic":230},{"name":108},{"id":122,"name":123,"tactic":232},{"name":125},{"id":127,"name":128,"tactic":234},{"name":108},{"id":131,"name":132,"tactic":236},{"name":125},{"id":135,"name":136,"tactic":238},{"name":44},{"id":139,"name":140,"tactic":240},{"name":44},{"id":143,"name":144,"tactic":242},{"name":44},{"id":147,"name":148,"tactic":244},{"name":39},{"id":151,"name":152,"tactic":246},{"name":39},{"id":155,"name":156,"tactic":248},{"name":39},{"id":159,"name":160,"tactic":250},{"name":39},{"id":163,"name":164,"tactic":252},{"name":39},{"id":167,"name":168,"tactic":254},{"name":39},{"id":171,"name":172,"tactic":256},{"name":39},{"id":175,"name":176,"tactic":258},{"name":39},{"id":179,"name":180,"tactic":260},{"name":39},{"id":262,"name":263,"techniques":264},"CAPEC-151","Identity Spoofing",[],{"id":266,"name":267,"techniques":268},"CAPEC-194","Fake the Source of Data",[],{"id":270,"name":271,"techniques":272},"CAPEC-22","Exploiting Trust in Client",[],{"id":274,"name":275,"techniques":276},"CAPEC-57","Utilizing REST's Trust in the System Resource to Obtain Sensitive Data",[277],{"id":278,"name":279,"tactics":280,"countermeasures":287},"T1040","Network Sniffing",[281,284],{"id":282,"name":283},"TA0031","Credential Access",{"id":285,"name":286},"TA0102","Discovery",[288],{"id":289,"name":290,"tactic":291},"D3-DNSTA","DNS Traffic Analysis",{"name":44},{"id":293,"name":294,"techniques":295},"CAPEC-593","Session Hijacking",[296,340,453],{"id":297,"name":298,"tactics":299,"countermeasures":303},"T1185","Browser Session Hijacking",[300],{"id":301,"name":302},"TA0100","Collection",[304,308,312,316,320,324,328,332,336],{"id":305,"name":306,"tactic":307},"D3-NTF","Network Traffic Filtering",{"name":39},{"id":309,"name":310,"tactic":311},"D3-NTSA","Network Traffic Signature Analysis",{"name":44},{"id":313,"name":314,"tactic":315},"D3-UGLPA","User Geolocation Logon Pattern Analysis",{"name":44},{"id":317,"name":318,"tactic":319},"D3-APCA","Application Protocol Command Analysis",{"name":44},{"id":321,"name":322,"tactic":323},"D3-NTCD","Network Traffic Community Deviation",{"name":44},{"id":325,"name":326,"tactic":327},"D3-RTSD","Remote Terminal Session Detection",{"name":44},{"id":329,"name":330,"tactic":331},"D3-PMAD","Protocol Metadata Anomaly Detection",{"name":44},{"id":333,"name":334,"tactic":335},"D3-CSPP","Client-server Payload Profiling",{"name":44},{"id":337,"name":338,"tactic":339},"D3-PHDURA","Per Host Download-Upload Ratio Analysis",{"name":44},{"id":341,"name":342,"tactics":343,"countermeasures":348},"T1550.001","Application Access Token",[344,345],{"id":29,"name":30},{"id":346,"name":347},"TA0109","Lateral Movement",[349,353,355,359,361,365,367,371,375,379,383,387,391,393,395,399,403,405,409,413,415,419,421,425,429,431,435,439,443,445,449,451],{"id":350,"name":351,"tactic":352},"D3-PS","Process Suspension",{"name":125},{"id":317,"name":318,"tactic":354},{"name":44},{"id":356,"name":357,"tactic":358},"D3-MFA","Multi-factor Authentication",{"name":71},{"id":329,"name":330,"tactic":360},{"name":44},{"id":362,"name":363,"tactic":364},"D3-PT","Process Termination",{"name":125},{"id":93,"name":94,"tactic":366},{"name":44},{"id":368,"name":369,"tactic":370},"D3-CH","Credential Hardening",{"name":71},{"id":372,"name":373,"tactic":374},"D3-PLA","Process Lineage Analysis",{"name":44},{"id":376,"name":377,"tactic":378},"D3-CR","Credential Revocation",{"name":125},{"id":380,"name":381,"tactic":382},"D3-ANCI","Authentication Cache Invalidation",{"name":125},{"id":384,"name":385,"tactic":386},"D3-PSMD","Process Self-Modification Detection",{"name":44},{"id":388,"name":389,"tactic":390},"D3-KBPI","Kernel-based Process Isolation",{"name":39},{"id":147,"name":148,"tactic":392},{"name":39},{"id":171,"name":172,"tactic":394},{"name":39},{"id":396,"name":397,"tactic":398},"D3-ABPI","Application-based Process Isolation",{"name":39},{"id":400,"name":401,"tactic":402},"D3-CTS","Credential Transmission Scoping",{"name":39},{"id":337,"name":338,"tactic":404},{"name":44},{"id":406,"name":407,"tactic":408},"D3-DUC","Decoy User Credential",{"name":49},{"id":410,"name":411,"tactic":412},"D3-WSAM","Web Session Access Mediation",{"name":39},{"id":325,"name":326,"tactic":414},{"name":44},{"id":416,"name":417,"tactic":418},"D3-CCSA","Credential Compromise Scope Analysis",{"name":44},{"id":321,"name":322,"tactic":420},{"name":44},{"id":422,"name":423,"tactic":424},"D3-RIC","Reissue Credential",{"name":108},{"id":426,"name":427,"tactic":428},"D3-TBA","Token-based Authentication",{"name":71},{"id":313,"name":314,"tactic":430},{"name":44},{"id":432,"name":433,"tactic":434},"D3-TB","Token Binding",{"name":71},{"id":436,"name":437,"tactic":438},"D3-HR","Host Reboot",{"name":125},{"id":440,"name":441,"tactic":442},"D3-HS","Host Shutdown",{"name":125},{"id":305,"name":306,"tactic":444},{"name":39},{"id":446,"name":447,"tactic":448},"D3-CRO","Credential Rotation",{"name":71},{"id":309,"name":310,"tactic":450},{"name":44},{"id":333,"name":334,"tactic":452},{"name":44},{"id":454,"name":455,"tactics":456,"countermeasures":458},"T1563","Remote Service Session Hijacking",[457],{"id":346,"name":347},[459,461,463,465,469,471,473,475,477,479],{"id":309,"name":310,"tactic":460},{"name":44},{"id":325,"name":326,"tactic":462},{"name":44},{"id":333,"name":334,"tactic":464},{"name":44},{"id":466,"name":467,"tactic":468},"D3-ST","Session Termination",{"name":125},{"id":317,"name":318,"tactic":470},{"name":44},{"id":329,"name":330,"tactic":472},{"name":44},{"id":305,"name":306,"tactic":474},{"name":39},{"id":321,"name":322,"tactic":476},{"name":44},{"id":337,"name":338,"tactic":478},{"name":44},{"id":313,"name":314,"tactic":480},{"name":44},{"id":482,"name":483,"techniques":484},"CAPEC-633","Token Impersonation",[485],{"id":486,"name":487,"tactics":488,"countermeasures":494},"T1134","Access Token Manipulation",[489,490,493],{"id":29,"name":30},{"id":491,"name":492},"TA0005","Stealth",{"id":32,"name":33},[495,497,499,501,503,505,507,509,511,513,515,517,519,521,523,525,527,529,531,533,535,537,539,541],{"id":400,"name":401,"tactic":496},{"name":39},{"id":416,"name":417,"tactic":498},{"name":44},{"id":135,"name":136,"tactic":500},{"name":44},{"id":93,"name":94,"tactic":502},{"name":44},{"id":466,"name":467,"tactic":504},{"name":125},{"id":376,"name":377,"tactic":506},{"name":125},{"id":380,"name":381,"tactic":508},{"name":125},{"id":51,"name":52,"tactic":510},{"name":54},{"id":406,"name":407,"tactic":512},{"name":49},{"id":368,"name":369,"tactic":514},{"name":71},{"id":171,"name":172,"tactic":516},{"name":39},{"id":356,"name":357,"tactic":518},{"name":71},{"id":446,"name":447,"tactic":520},{"name":71},{"id":432,"name":433,"tactic":522},{"name":71},{"id":426,"name":427,"tactic":524},{"name":71},{"id":105,"name":106,"tactic":526},{"name":108},{"id":422,"name":423,"tactic":528},{"name":108},{"id":89,"name":90,"tactic":530},{"name":54},{"id":81,"name":82,"tactic":532},{"name":54},{"id":147,"name":148,"tactic":534},{"name":39},{"id":41,"name":42,"tactic":536},{"name":44},{"id":56,"name":57,"tactic":538},{"name":44},{"id":175,"name":176,"tactic":540},{"name":39},{"id":179,"name":180,"tactic":542},{"name":39},{"id":544,"name":545,"techniques":546},"CAPEC-650","Upload a Web Shell to a Web Server",[547],{"id":548,"name":549,"tactics":550,"countermeasures":554},"T1505.003","Web Shell",[551],{"id":552,"name":553},"TA0110","Persistence",[555,557,559,561,563,567,571,573,575,577,579,581,583,585,589,591,593,595,597,599,601,603,605,607,609,611,613,615,617,621,625],{"id":68,"name":69,"tactic":556},{"name":71},{"id":396,"name":397,"tactic":558},{"name":39},{"id":46,"name":47,"tactic":560},{"name":49},{"id":384,"name":385,"tactic":562},{"name":44},{"id":564,"name":565,"tactic":566},"D3-PLM","Physical Link Mapping",{"name":54},{"id":568,"name":569,"tactic":570},"D3-LLM","Logical Link Mapping",{"name":54},{"id":139,"name":140,"tactic":572},{"name":44},{"id":101,"name":102,"tactic":574},{"name":44},{"id":179,"name":180,"tactic":576},{"name":39},{"id":388,"name":389,"tactic":578},{"name":39},{"id":143,"name":144,"tactic":580},{"name":44},{"id":362,"name":363,"tactic":582},{"name":125},{"id":163,"name":164,"tactic":584},{"name":39},{"id":586,"name":587,"tactic":588},"D3-EHB","Endpoint Health Beacon",{"name":44},{"id":147,"name":148,"tactic":590},{"name":39},{"id":151,"name":152,"tactic":592},{"name":39},{"id":372,"name":373,"tactic":594},{"name":44},{"id":36,"name":37,"tactic":596},{"name":39},{"id":350,"name":351,"tactic":598},{"name":125},{"id":175,"name":176,"tactic":600},{"name":39},{"id":122,"name":123,"tactic":602},{"name":125},{"id":93,"name":94,"tactic":604},{"name":44},{"id":159,"name":160,"tactic":606},{"name":39},{"id":436,"name":437,"tactic":608},{"name":125},{"id":110,"name":111,"tactic":610},{"name":108},{"id":440,"name":441,"tactic":612},{"name":125},{"id":171,"name":172,"tactic":614},{"name":39},{"id":64,"name":65,"tactic":616},{"name":44},{"id":618,"name":619,"tactic":620},"D3-NNI","Network Node Inventory",{"name":54},{"id":622,"name":623,"tactic":624},"D3-RNA","Restore Network Access",{"name":108},{"id":155,"name":156,"tactic":626},{"name":39},{"id":628,"name":629,"techniques":630},"CAPEC-94","Adversary in the Middle (AiTM)",[631],{"id":632,"name":633,"tactics":634,"countermeasures":637},"T1557","Adversary-in-the-Middle",[635,636],{"id":282,"name":283},{"id":301,"name":302},[638,640,642,644,646,648,650,652,654,656],{"id":305,"name":306,"tactic":639},{"name":39},{"id":313,"name":314,"tactic":641},{"name":44},{"id":329,"name":330,"tactic":643},{"name":44},{"id":333,"name":334,"tactic":645},{"name":44},{"id":337,"name":338,"tactic":647},{"name":44},{"id":309,"name":310,"tactic":649},{"name":44},{"id":317,"name":318,"tactic":651},{"name":44},{"id":321,"name":322,"tactic":653},{"name":44},{"id":325,"name":326,"tactic":655},{"name":44},{"id":657,"name":658,"tactic":659},"D3-CAA","Connection Attempt Analysis",{"name":44},[661],{"_key":662,"name":663,"source":664,"url":665,"maturity":666,"reliability_score":667,"verified":668,"type":9,"platforms":669,"requires_auth":9,"exploitdb":9,"metasploit":9},"GITHUB_TEIWIET_TENDA-AC10-VULNERABILITIES","Tenda Ac10 Vulnerabilities","github","https://github.com/teiwiet/tenda-ac10-vulnerabilities/blob/main/advisory-fromAdvSetLanip.md","poc",0.3,false,[],[],[],[],[],[],"2026-08-16T01:00:13.158Z","Received",{"cisa_kev":668,"cisa_ransomware":668,"cisa_vendor":9,"epss_severity":9,"epss_score":9,"severity":678,"severity_score":679,"severity_version":680,"severity_source":681,"severity_vector":682,"severity_status":676},"high",10,"v2.0","cve.org","AV:N/AC:L/Au:N/C:C/I:C/A:C/E:POC/RL:ND/RC:UR",[684,691,697,702,706,711],{"url":685,"sources":686,"tags":688},"https://vuldb.com/vuln/390174",[681,687],"nvd",[689,690],"VDB Entry","Technical Description",{"url":692,"sources":693,"tags":694},"https://vuldb.com/vuln/390174/cti",[681,687],[695,696],"Signature","Permissions Required",{"url":698,"sources":699,"tags":700},"https://vuldb.com/cve/CVE-2026-19924",[681,687],[701],"Third Party Advisory",{"url":703,"sources":704,"tags":705},"https://vuldb.com/submit/871957",[681,687],[701],{"url":707,"sources":708,"tags":709},"https://github.com/teiwiet/tenda-ac10-vulnerabilities/blob/main/authen-bypass-tenda-ac10.md",[681,687],[710],"Exploit",{"url":712,"sources":713,"tags":714},"https://www.tenda.com.cn/",[681,687],[715],"Product",[],[],[719,730],{"source":681,"cvss_v2_0":720,"cvss_v3_0":721,"cvss_v3_1":725,"cvss_v4_0":727},{"baseScore":679,"baseSeverity":9,"vectorString":682,"impactScore":679,"exploitabilityScore":679},{"baseScore":722,"baseSeverity":723,"vectorString":724,"impactScore":722,"exploitabilityScore":679},9.8,"CRITICAL","CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R",{"baseScore":722,"baseSeverity":723,"vectorString":726,"impactScore":722,"exploitabilityScore":679},"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R",{"baseScore":728,"baseSeverity":723,"vectorString":729,"impactScore":9,"exploitabilityScore":9},9.3,"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P",{"source":687,"cvss_v2_0":731,"cvss_v3_0":9,"cvss_v3_1":733,"cvss_v4_0":735},{"baseScore":679,"baseSeverity":9,"vectorString":732,"impactScore":679,"exploitabilityScore":679},"AV:N/AC:L/Au:N/C:C/I:C/A:C",{"baseScore":722,"baseSeverity":723,"vectorString":734,"impactScore":722,"exploitabilityScore":679},"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",{"baseScore":736,"baseSeverity":737,"vectorString":738,"impactScore":9,"exploitabilityScore":9},8.9,"HIGH","CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",[740],{"ecosystem":9,"name":741,"vendor":742,"product":743,"cpe_part":744,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":745},"AC10","tenda","ac10","a",[746],{"version":747,"is_range":668,"range_type":681,"version_start":747,"version_start_type":748,"version_end":747,"version_end_type":748,"fixed_in":9},"16.03.10.09_multi_TDE01","including"]