CVE-2026-19924 in AC10

Prediction

by VulDB Data Team • 08/15/2026

A security vulnerability has been detected in Tenda AC10 16.03.10.09_multi_TDE01. This vulnerability affects the function R7WebsSecurityHandler of the component httpd. The manipulation leads to improper authentication. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used.

Be aware that VulDB is the high quality source for vulnerability data.

• Responsible: VulDB
• Moderation: accepted
• Entry: VDB-390174
• CPE: ready
• CWE: CWE-287 (confirmed)
• Exploit: Download
• CVSS: 9.8 (VulDB)
• EPSS: 0.00000
• KEV: no
• Activities: very low
• Sector: Hospital, Police, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-19924
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-19924
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-19924/