CVE Explorer
CVE-2026-24427
Shenzhen Tenda AC7 firmware version V03.03.03.01_cn and prior expose sensitive information in web management responses. Administrative credentials, including the router and/or admin panel password, are included in plaintext within configuration response bodies. In addition, responses lack appropriate Cache-Control directives, which may permit web browsers to cache pages containing these credentials and enable subsequent disclosure to an attacker with access to the client system or browser profil
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
0
Affected products and versions
1 source assertion{"defaultStatus":"unaffected","product":"Tenda AC7","vendor":"Shenzhen Tenda Technology Co., Ltd.","versions":[{"lessThanOrEqual":"03.03.03.01_cn","status":"affected","version":"0","versionType":"custom"}]}
- cve_program_cvelist_v5affectedurn:baitaphish:normalized-source-record:v2:42fac56c63f9dd2653fd2b64638f08c693bfc57659ca2acd2e02315b08e2c485 · sha256:9a01cf1d22c1d18c… · /containers/cna/affected/0
Provider-owned CVSS observations
1 source assertion{"metric":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"LOCAL","baseScore":6.8,"baseSeverity":"MEDIUM","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"NONE…
- cve_program_cvelist_v5cvssurn:baitaphish:normalized-source-record:v2:42fac56c63f9dd2653fd2b64638f08c693bfc57659ca2acd2e02315b08e2c485 · sha256:9a01cf1d22c1d18c… · /containers/cna/metrics/0/cvssV4_0
CWE assertions
1 source assertion{"cweId":"CWE-201","description":"CWE-201 Insertion of Sensitive Information Into Sent Data","lang":"en","type":"CWE"}
- cve_program_cvelist_v5cweurn:baitaphish:normalized-source-record:v2:42fac56c63f9dd2653fd2b64638f08c693bfc57659ca2acd2e02315b08e2c485 · sha256:9a01cf1d22c1d18c… · /containers/cna/problemTypes/0/descriptions/0
Source references
2 source assertions{"tags":["product"],"url":"https://www.tendacn.com/product/AC7"}
- cve_program_cvelist_v5referenceurn:baitaphish:normalized-source-record:v2:42fac56c63f9dd2653fd2b64638f08c693bfc57659ca2acd2e02315b08e2c485 · sha256:9a01cf1d22c1d18c… · /containers/cna/references/0
{"tags":["third-party-advisory"],"url":"https://www.vulncheck.com/advisories/tenda-ac7-exposes-admin-credentials-in-configuration-responses"}
- cve_program_cvelist_v5referenceurn:baitaphish:normalized-source-record:v2:42fac56c63f9dd2653fd2b64638f08c693bfc57659ca2acd2e02315b08e2c485 · sha256:9a01cf1d22c1d18c… · /containers/cna/references/1
Attribution and limitations
- CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →
Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.