Critical severity9.8NVD Advisory· Published Aug 16, 2026

CVE-2026-19924

Description

A security vulnerability has been detected in Tenda AC10 16.03.10.09_multi_TDE01. This vulnerability affects the function R7WebsSecurityHandler of the component httpd. The manipulation leads to improper authentication. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Tenda/Ac10llm-fuzzy
Range: 16.03.10.09_multi_TDE01

Patches

Vulnerability mechanics

References

github.com/teiwiet/tenda-ac10-vulnerabilities/blob/main/authen-bypass-tenda-ac10.mdnvd
vuldb.com/cve/CVE-2026-19924nvd
vuldb.com/submit/871957nvd
vuldb.com/vuln/390174nvd
vuldb.com/vuln/390174/ctinvd
www.tenda.com.cnnvd

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000