CVE-2026-24427 | BDVDB-2026-313601 Detail

Description#

Shenzhen Tenda AC7 firmware version V03.03.03.01_cn and prior expose sensitive information in web management responses. Administrative credentials, including the router and/or admin panel password, are included in plaintext within configuration response bodies. In addition, responses lack appropriate Cache-Control directives, which may permit web browsers to cache pages containing these credentials and enable subsequent disclosure to an attacker with access to the client system or browser profile.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12026-02-03Record published in the CVE List.
2. Version 22026-05-25Most recent update recorded in the CVE List.