01 Record

CVE-2026-19747

Tenda CH7 ATE Module Kylin HandleCmd command injection

CriticalPUBLISHEDCNA: VulDB

Base score9.3 CVSS v4.0CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P

02 Description

Tenda CH7 ATE Module Kylin HandleCmd command injection

Published: 2026-08-13 19:45Z22 HR AGO
Last updated: 2026-08-14 15:42Z3 HR AGO
Reserved: 2026-08-13
Assigning CNA: VulDB
Record state: PUBLISHED
Severity: Critical (CVSS 9.3)
CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
Weaknesses: CWE-74 CWE-77
SSVC decision: ExploitationpocAutomatableyesTechnical Impacttotal
Data version: 5.2
Document digest: b0e879d4d5a50c40e1d71a5f2d25c60e215208139f2aa6fa0acfab5b91ef31f1

VendorProductVersionsPlatforms

TendaCH720260625—

TendaCH7G20260625—

TendaCH1020260625—

TendaCP320260625—

TendaCP3 Pro20260625—

TendaCP720260625—

TendaTC3B14C20260625—

TendaTC3B15C20260625—

TendaTC3T14C20260625—

TendaTC3T15C20260625—

vuldb.comVDB-389498 | Tenda CH7 ATE Module Kylin HandleCmd command injectionhttps://vuldb.com/vuln/389498vdb-entrytechnical-description
vuldb.comVDB-389498 | CTI Indicators (IOB, IOC, TTP, IOA)https://vuldb.com/vuln/389498/ctisignaturepermissions-required
vuldb.comCVE-2026-19747 | CVE Analysis and Reporthttps://vuldb.com/cve/CVE-2026-19747third-party-advisory
vuldb.comSubmit #868463 | Tenda Tenda Multiple IP Cameras Multiple Versions Command Injectionhttps://vuldb.com/submit/868463third-party-advisory
github.comhttps://github.com/howitouchyou/Tenda-Smart-Camera-Vulnerability/blob/main/Tenda%20Command%20Injection/Tenda%20Command%20Injection.mdrelated
www.tenda.com.cnhttps://www.tenda.com.cn/product