CVE-2026-19747

CRITICAL 9.8

Tenda CH7 ATE Module Kylin HandleCmd command injection

CVSS Score

9.8

EPSS Score

0.0%

EPSS Percentile

0th

A weakness has been identified in Tenda CH7, CH7G, CH10, CP3, CP3 Pro, CP7, TC3B14C, TC3B15C, TC3T14C and TC3T15C up to 20260625. This impacts the function CAte::HandleCmd of the file Kylin of the component ATE Module. This manipulation causes command injection. The attack is possible to be carried out remotely.

CWE	CWE-77 CWE-74
Vendor	tenda
Product	ch7
Published	Aug 13, 2026

Stay Ahead of the Next One

Get instant alerts for tenda ch7

Be the first to know when new critical vulnerabilities affecting tenda ch7 are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

Tenda / CH7

20260625

Tenda / CH7G

20260625

Tenda / CH10

20260625

Tenda / CP3

20260625

Tenda / CP3 Pro

20260625

Tenda / CP7

20260625

Tenda / TC3B14C

20260625

Tenda / TC3B15C

20260625

Tenda / TC3T14C

20260625

Tenda / TC3T15C

20260625

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/389498 vuldb.com: https://vuldb.com/vuln/389498/cti vuldb.com: https://vuldb.com/cve/CVE-2026-19747 vuldb.com: https://vuldb.com/submit/868463 github.com: https://github.com/howitouchyou/Tenda-Smart-Camera-Vulnerability/blob/main/Tenda%20Command%20Injection/Tenda%20Command%20Injection.md tenda.com.cn: https://www.tenda.com.cn/

Credits

🔍 Howitouchyou (VulDB User)