Critical 9.8Published Aug 13, 2026

CVE-2026-19747Tenda CH7 ATE Module Kylin HandleCmd command injection

Updated under an hour ago (Oct 27, 2026, 7:10 PM ET)

Does this affect you?

It affects Tenda CH7 and 9 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Tenda CH7

Exploited in the last 30 days

A weakness has been identified in Tenda CH7, CH7G, CH10, CP3, CP3 Pro, CP7, TC3B14C, TC3B15C, TC3T14C and TC3T15C up to 20260625. This impacts the function CAte::HandleCmd of the file Kylin of the component ATE Module. This manipulation causes command injection. The attack is possible to be carried out remotely.

CVSS: 9.8 CRITICAL (v3.1, CNA)CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R
Weakness (CWE): CWE-77, CWE-74
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: VulDB
NVD analysis: Deferred
Record last updated: Aug 14, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Tenda CH7 tenda:ch7	20260625	CNA record
Tenda CH7G tenda:ch7g	20260625	CNA record
Tenda CH10 tenda:ch10	20260625	CNA record
Tenda CP3 tenda:cp3	20260625	CNA record
Tenda CP3 Pro tenda:cp3_pro	20260625	CNA record
Tenda CP7 tenda:cp7	20260625	CNA record
Tenda TC3B14C tenda:tc3b14c	20260625	CNA record
Tenda TC3B15C tenda:tc3b15c	20260625	CNA record
Tenda TC3T14C tenda:tc3t14c	20260625	CNA record
Tenda TC3T15C tenda:tc3t15c	20260625	CNA record

References

References

https://vuldb.com/vuln/389498	vdb-entry, technical-description
https://vuldb.com/vuln/389498/cti	signature, permissions-required
https://vuldb.com/cve/CVE-2026-19747	third-party-advisory
https://vuldb.com/submit/868463	third-party-advisory
https://github.com/howitouchyou/Tenda-Smart-Camera-Vulnerability/blob/main/Tenda%20Command%20Injection/Tenda%20Command%20Injection.md	related
https://www.tenda.com.cn/	product

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.