CVE-2026-24427 Tenda AC7 Exposes Admin Credentials in Configuration Responses
Tenda AC7 routers expose admin credentials in plaintext configuration responses, allowing attackers to steal credentials and gain unauthorized access.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-24427?
CVE-2026-24427 is a medium-severity vulnerability in Tenda Ac7 Firmware, published on 3 Feb 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Shenzhen Tenda AC7 firmware version V03.03.03.01_cn and prior expose sensitive information in web management responses. Administrative credentials, including the router and/or admin panel password, are included in plaintext within configuration response bodies. In addition, responses lack appropriate Cache-Control directives, which may permit web browsers to cache pages containing these credentials and enable subsequent disclosure to an attacker with access to the client system or browser profile.
Weakness: CWE-201
Which versions are affected by CVE-2026-24427?
It affects 1 product.
Products include Tenda Ac7 Firmware.
How do I fix CVE-2026-24427?
No fix has been published for CVE-2026-24427 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-24427 being exploited?
There is no known exploitation of CVE-2026-24427 in the wild and no public exploit code.
Other vulnerabilities in Tenda Ac7 Firmware
Sources
Also known as GHSA-6rpr-9cmg-mvvj.