CVE-2026-24441

Publication date

2026-02-03 19:14:41

Family

VulnCheck

State

PUBLISHED

Description

Shenzhen Tenda AC7 firmware version V03.03.03.01_cn and prior expose account credentials in plaintext within HTTP responses, allowing an on-path attacker to obtain sensitive authentication material.