Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2026-19747

Tenda CH7 ATE Module Kylin HandleCmd command injection

Description

A weakness has been identified in Tenda CH7, CH7G, CH10, CP3, CP3 Pro, CP7, TC3B14C, TC3B15C, TC3T14C and TC3T15C up to 20260625. This impacts the function CAte::HandleCmd of the file Kylin of the component ATE Module. This manipulation causes command injection. The attack is possible to be carried out remotely.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Tenda CH7

  • 20260625affected

Tenda CH7G

  • 20260625affected

Tenda CH10

  • 20260625affected

Tenda CP3

  • 20260625affected

Tenda CP3 Pro

  • 20260625affected

Tenda CP7

  • 20260625affected

Tenda TC3B14C

  • 20260625affected

Tenda TC3B15C

  • 20260625affected

Tenda TC3T14C

  • 20260625affected

Tenda TC3T15C

  • 20260625affected

References