CVE-2026-19750: Tenda CH/CP/TX3 SSH hard-coded password
A flaw has been found in Tenda CH, CP and TX3 V21.x/V22.x/V25.x/V26.x/V27.x. Affected by this issue is some unknown functionality of the component SSH. Executing a manipulation can lead to use of hard-coded password. It is possible to launch the attack remotely. The attack requires a high level of complexity. The exploitation is known to be difficult. The exploit has been published and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-19750?
The severity of CVE-2026-19750 is rated as high with a score of 8.1.
How do I fix CVE-2026-19750?
To fix CVE-2026-19750, update your Tenda CH/CP/TX3 devices to the latest firmware version that addresses this vulnerability.
What systems are affected by CVE-2026-19750?
CVE-2026-19750 affects Tenda CH/CP and TX3 devices running V21.x, V22.x, V25.x, V26.x, and V27.x.
Can CVE-2026-19750 be exploited remotely?
Yes, CVE-2026-19750 can be exploited remotely, allowing unauthorized access to systems.
What type of vulnerability is CVE-2026-19750?
CVE-2026-19750 is a security vulnerability characterized by the use of a hard-coded SSH password.