AC
Product
AC7
by Tenda · last CVE Jun 19, 2026
On CISA KEVExploited in the wild
72
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 28High 40Medium 4Low 0
Watch

Add AC7 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-24434
6.5
0%
Feb 3
Tenda AC7 Web Interface Lacks CSRF Protections for Admin Actions
Affected: through 03.03.03.01
CVE-2026-24426
6.1
0%
Feb 3
Tenda AC7 Reflected XSS via Web Interface Output Encoding
Affected: through 03.03.03.01
CVE-2026-24441
5.9
0%
Feb 3
Tenda AC7 Transmits Admin Credentials Without HTTPS Protection
Affected: through 03.03.03.01
CVE-2026-24427
5.5
0%
Feb 3
Tenda AC7 Exposes Admin Credentials in Configuration Responses
Affected: through 03.03.03.01
Showing 4