CVE-2026-24441 — Tenda AC7 Transmits Admin Credentials Without HTTPS Protection
Shenzhen Tenda AC7 firmware version V03.03.03.01_cn and prior expose account credentials in plaintext within HTTP responses, allowing an on-path attacker to obtain sensitive aut…
Published: 2026-02-03 · CVSS: 8.2 · CVSS 4.0
Shenzhen Tenda AC7 firmware version V03.03.03.01_cn and prior expose account credentials in plaintext within HTTP responses, allowing an on-path attacker to obtain sensitive authentication material.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7