CVE-2026-19924 | Tenda AC10 16.03.10.09_multi_TDE01 httpd R7WebsSecurityHandler improper authentication

A vulnerability was found in Tenda AC10 16.03.10.09_multi_TDE01. It has been rated as critical. This vulnerability affects the function R7WebsSecurityHandler of the component httpd. The manipulation leads to improper authentication.

This vulnerability is listed as CVE-2026-19924. The attack may be initiated remotely. In addition, an exploit is available.