CVE-2026-19749 in CH7
Summary
by MITRE • 08/14/2026
A vulnerability was detected in Tenda CH7, CH7G, CH10, CP3, CP3 Pro, CP7, TC3B14C, TC3B15C, TC3T14C and TC3T15C up to 20260625. Affected by this vulnerability is an unknown functionality of the component RTSP/ONVIF. Performing a manipulation results in missing authentication. It is possible to initiate the attack remotely. The attack is considered to have high complexity. The exploitation appears to be difficult. The exploit is now public and may be used.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Analysis
by VulDB Data Team • 08/14/2026
This vulnerability affects multiple Tenda network devices including CH7, CH7G, CH10, CP3, CP3 Pro, CP7, TC3B14C, TC3B15C, TC3T14C, and TC3T15C models with firmware versions up to 20260625. The flaw resides in the RTSP/ONVIF component functionality which is responsible for streaming video content and managing network camera protocols. This represents a critical security weakness that allows attackers to bypass authentication mechanisms through manipulation of the affected system components.
The technical implementation involves a failure in the authentication process within the RTSP/ONVIF subsystem where proper credential verification is not enforced during connection establishment. This vulnerability creates an unauthorized access vector that permits remote exploitation without requiring valid credentials, making it particularly dangerous for networked security camera systems. The attack complexity is rated as high due to the specialized nature of RTSP/ONVIF protocols and the need for precise manipulation of the affected component.
From an operational perspective, this vulnerability poses significant risks to organizations relying on Tenda devices for surveillance and network monitoring. Remote exploitation could enable unauthorized access to video streams, potential modification of camera settings, or even complete control over connected security infrastructure. The public availability of exploit code increases the likelihood of widespread compromise across affected deployments, particularly in environments where these devices are exposed to external networks without proper segmentation.
Security mitigations should prioritize immediate firmware updates from Tenda to address the authentication bypass vulnerability. Network administrators should implement strict firewall rules to restrict access to RTSP/ONVIF ports, segment affected devices on isolated network segments, and monitor for unauthorized access attempts. Organizations should also consider disabling unnecessary RTSP/ONVIF services when not actively required, as outlined in the CWE 305 authentication bypass weakness classification. This vulnerability aligns with ATT&CK technique T1190 for exploiting remote services and represents a significant risk to supply chain security where network cameras serve as critical infrastructure components. The complexity of exploitation does not diminish the severity of impact, as automated tools may be developed to leverage this weakness against vulnerable deployments.
This vulnerability demonstrates the importance of proper authentication implementation in networked security devices and highlights the need for comprehensive security testing of embedded systems. The public availability of exploitation tools increases the urgency for immediate remediation actions across all affected Tenda device models. Organizations should conduct thorough inventory assessments to identify all potentially vulnerable devices and implement layered security controls including network monitoring, access control restrictions, and regular security assessments to prevent unauthorized exploitation attempts.