CVE-2026-19749

LOW 3.7

Tenda CH7 RTSP/ONVIF missing authentication

CVSS Score

3.7

EPSS Score

0.0%

EPSS Percentile

0th

A vulnerability was detected in Tenda CH7, CH7G, CH10, CP3, CP3 Pro, CP7, TC3B14C, TC3B15C, TC3T14C and TC3T15C up to 20260625. Affected by this vulnerability is an unknown functionality of the component RTSP/ONVIF. Performing a manipulation results in missing authentication. It is possible to initiate the attack remotely. The attack is considered to have high complexity. The exploitation appears to be difficult. The exploit is now public and may be used.

CWE	CWE-306 CWE-287
Vendor	tenda
Product	ch7
Published	Aug 13, 2026

Stay Ahead of the Next One

Get instant alerts for tenda ch7

Be the first to know when new low vulnerabilities affecting tenda ch7 are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:W/RC:R

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

Tenda / CH7

20260625

Tenda / CH7G

20260625

Tenda / CH10

20260625

Tenda / CP3

20260625

Tenda / CP3 Pro

20260625

Tenda / CP7

20260625

Tenda / TC3B14C

20260625

Tenda / TC3B15C

20260625

Tenda / TC3T14C

20260625

Tenda / TC3T15C

20260625

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/389500 vuldb.com: https://vuldb.com/vuln/389500/cti vuldb.com: https://vuldb.com/cve/CVE-2026-19749 vuldb.com: https://vuldb.com/submit/868503 github.com: https://github.com/howitouchyou/Tenda-Smart-Camera-Vulnerability/blob/main/Tenda%20RTSP_ONVIF%20Auth%20Bypass/Tenda%20RTSP_ONVIF%20Auth%20Bypass.md tenda.com.cn: https://www.tenda.com.cn/

Credits

🔍 Howitouchyou (VulDB User)