Approved changes feed: RSS · Atom
cpe:2.3:h:tenda:ac7:-:*:*:*:*:*:*:*
part: h version: - update: *
| Vendor | Tenda (cebb1c0a-7ddd-5bf6-9fc6-52b2b4f8dd42) |
|---|---|
| Product | Ac7 (9112a2dc-e86f-5f6f-bd07-fef2543827b3) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-24441 |
not_vulnerable | 2026-06-08 07:51:17.678886 |
Tenda AC7 Transmits Admin Credentials Without HTTPS Protection
Shenzhen Tenda AC7 firmware version V03.03.03.01_cn and prior expose account credentials in plaintext within HTTP responses, allowing an on-path attacker to obtain sensitive authentication material.
Published: 2026-02-03T19:14:41.224Z
Updated: 2026-05-14T02:09:40.338Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-24434 |
not_vulnerable | 2026-06-08 07:51:17.675619 |
Tenda AC7 Web Interface Lacks CSRF Protections for Admin Actions
Shenzhen Tenda AC7 firmware version V03.03.03.01_cn and prior does not implement CSRF protections for administrative functions in the web management interface. The interface does not enforce anti-CSRF tokens or robust origin validation, which can allow an attacker to induce a logged-in administrator to perform unintended state-changing requests and modify router settings.
Published: 2026-02-03T19:13:01.162Z
Updated: 2026-05-14T02:09:35.575Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-24427 |
not_vulnerable | 2026-06-08 07:51:17.665163 |
Tenda AC7 Exposes Admin Credentials in Configuration Responses
Shenzhen Tenda AC7 firmware version V03.03.03.01_cn and prior expose sensitive information in web management responses. Administrative credentials, including the router and/or admin panel password, are included in plaintext within configuration response bodies. In addition, responses lack appropriate Cache-Control directives, which may permit web browsers to cache pages containing these credentials and enable subsequent disclosure to an attacker with access to the client system or browser profile.
Published: 2026-02-03T19:11:32.297Z
Updated: 2026-05-25T23:41:42.134Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-24426 |
not_vulnerable | 2026-06-08 07:51:17.664595 |
Tenda AC7 Reflected XSS via Web Interface Output Encoding
Shenzhen Tenda AC7 firmware version V03.03.03.01_cn and prior contain an improper output encoding vulnerability in the web management interface. User-supplied input is reflected in HTTP responses without adequate escaping, allowing injection of arbitrary HTML or JavaScript in a victim’s browser context.
Published: 2026-02-03T19:09:37.339Z
Updated: 2026-05-25T23:41:41.402Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-9023 |
not_vulnerable | 2026-06-08 07:45:21.601923 |
Tenda AC7/AC18 SetLEDCfg formSetSchedLed buffer overflow
HIGH (8.8)
A vulnerability has been found in Tenda AC7 and AC18 15.03.05.19/15.03.06.44. Affected is the function formSetSchedLed of the file /goform/SetLEDCfg. The manipulation of the argument Time leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-08-15T08:32:07.431Z
Updated: 2025-08-15T16:01:28.497Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-4810 |
not_vulnerable | 2026-06-08 07:29:17.326993 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-4809 |
not_vulnerable | 2026-06-08 07:29:17.326373 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-3346 |
not_vulnerable | 2026-06-08 07:23:08.701997 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-1851 |
not_vulnerable | 2026-06-08 07:08:38.342887 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-1819 |
not_vulnerable | 2026-06-08 07:08:38.216596 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-48826 |
not_vulnerable | 2026-06-08 06:50:09.989082 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-48825 |
not_vulnerable | 2026-06-08 06:50:09.988484 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2903 |
not_vulnerable | 2026-06-08 06:35:27.652840 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2903 |
vulnerable | 2026-06-08 06:35:27.652560 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2902 |
not_vulnerable | 2026-06-08 06:35:27.652133 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2901 |
not_vulnerable | 2026-06-08 06:35:27.651486 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2901 |
vulnerable | 2026-06-08 06:35:27.651390 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2900 |
not_vulnerable | 2026-06-08 06:35:27.650649 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2899 |
not_vulnerable | 2026-06-08 06:35:27.650022 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2899 |
vulnerable | 2026-06-08 06:35:27.649820 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2898 |
not_vulnerable | 2026-06-08 06:35:27.649304 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2897 |
not_vulnerable | 2026-06-08 06:35:27.648575 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2896 |
not_vulnerable | 2026-06-08 06:35:27.647785 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2895 |
not_vulnerable | 2026-06-08 06:35:27.644810 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2894 |
not_vulnerable | 2026-06-08 06:35:27.644232 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2893 |
not_vulnerable | 2026-06-08 06:35:27.636531 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2892 |
not_vulnerable | 2026-06-08 06:35:27.635819 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2892 |
vulnerable | 2026-06-08 06:35:27.635464 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2891 |
not_vulnerable | 2026-06-08 06:35:27.634931 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-10280 |
not_vulnerable | 2026-06-08 06:22:03.923722 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-38937 |
vulnerable | 2026-06-08 06:09:35.547727 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-38936 |
vulnerable | 2026-06-08 06:09:35.505563 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-38933 |
vulnerable | 2026-06-08 06:08:19.215825 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-38931 |
vulnerable | 2026-06-08 06:08:19.198421 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-38930 |
vulnerable | 2026-06-08 06:08:19.178710 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-37717 |
not_vulnerable | 2026-06-08 06:08:15.911868 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-37717 |
vulnerable | 2026-06-08 06:08:15.911309 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-37716 |
not_vulnerable | 2026-06-08 06:08:15.908302 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-37716 |
vulnerable | 2026-06-08 06:08:15.901652 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-37714 |
not_vulnerable | 2026-06-08 06:08:15.898531 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-18732 |
not_vulnerable | 2026-06-08 05:11:14.617622 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-18731 |
not_vulnerable | 2026-06-08 05:11:14.616704 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-18730 |
not_vulnerable | 2026-06-08 05:11:14.615953 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-18729 |
not_vulnerable | 2026-06-08 05:11:14.615177 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-18727 |
not_vulnerable | 2026-06-08 05:11:14.613447 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-18709 |
not_vulnerable | 2026-06-08 05:11:14.526943 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-18708 |
not_vulnerable | 2026-06-08 05:11:14.526136 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-18707 |
not_vulnerable | 2026-06-08 05:11:14.525054 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-18706 |
not_vulnerable | 2026-06-08 05:11:14.520137 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-14559 |
not_vulnerable | 2026-06-08 05:10:53.047513 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-14558 |
not_vulnerable | 2026-06-08 05:10:53.046792 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-14557 |
not_vulnerable | 2026-06-08 05:10:53.043371 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.