Medium severity5.9NVD Advisory· Published Feb 3, 2026· Updated Jun 17, 2026

CVE-2026-24441

Description

Shenzhen Tenda AC7 firmware version V03.03.03.01_cn and prior expose account credentials in plaintext within HTTP responses, allowing an on-path attacker to obtain sensitive authentication material.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Tenda/Ac7 Firmware
cpe:2.3:o:tenda:ac7_firmware:*:*:*:*:*:*:*:*
Range: <=03.03.03.01
Tenda/AC7llm-fuzzy2 versions
<=V03.03.03.01_cn+ 1 more
- (no CPE)range: <=V03.03.03.01_cn
- (no CPE)range: 0

Patches

Vulnerability mechanics

References

www.vulncheck.com/advisories/tenda-ac7-transmits-admin-credentials-without-https-protectionnvdThird Party Advisory
www.tendacn.com/product/AC7nvdProduct

News mentions

No linked articles in our index yet.

cvss	0.384
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000