Vulnerability in Tenda Ch

CVE-2026-19750

A flaw has been found in Tenda CH, CP and TX3 V21.x/V22.x/V25.x/V26.x/V27.x. Affected by this issue is some unknown functionality of the component SSH. Executing a manipulation can lead to use of hard-coded password. It is possible to launch the attack remotely. The attack requires a high level of complexity. The exploitation is known to be difficult. The exploit has been published and may be used.

CVSS v3 metric

CVSS v3 base score 8.1 (High). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Weakness classification (CWE)

References

Frequently asked questions

What is CVE-2026-19750?
CVE-2026-19750 is a high-severity vulnerability in Tenda Ch, classified under CWE-255. CVSS score: 8.1/10. Published 2026-08-13.
How severe is CVE-2026-19750?
High severity. CVSS v3 base score is 8.1 out of 10.