Critical severity9.8NVD Advisory· Published Aug 31, 2026· Updated Sep 1, 2026
CVE-2026-38577
CVE-2026-38577
Description
Insecure hardcoded credentials in the Admin account of Tenda HG21 V4.0.0-260302 allows attackers to gain root access.
Affected products
1Patches
Vulnerability mechanics
References
1News mentions
2- ⚡ Weekly Recap: Chrome 0-Day, Router Hijacks, Coder Supply Chain Attack and MoreThe Hacker News · Sep 7, 2026
- Tenda Routers: Five Critical Vulnerabilities Including Hardcoded Credentials and Auth Bypass Disclosed TogetherVypr Intelligence · Aug 31, 2026