CVE-2026-19747

Tenda CH7 ATE Module Kylin HandleCmd command injection

Published Aug 13, 2026 CVSS 4.0 · 9.3 Critical EPSS 3.1% KEV · Not listed
Description
A weakness has been identified in Tenda CH7, CH7G, CH10, CP3, CP3 Pro, CP7, TC3B14C, TC3B15C, TC3T14C and TC3T15C up to 20260625. This impacts the function CAte::HandleCmd of the file Kylin of the component ATE Module. This manipulation causes command injection. The attack is possible to be carried out remotely.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Type Values Removed Values Added
Description A weakness has been identified in Tenda CH7, CH7G, CH10, CP3, CP3 Pro, CP7, TC3B14C, TC3B15C, TC3T14C and TC3T15C up to 20260625. This impacts the function CAte::HandleCmd of the file Kylin of the component ATE Module. This manipulation causes command injection. The attack is possible to be carried out remotely.
Title Tenda CH7 ATE Module Kylin HandleCmd command injection
First Time appeared Tenda
Tenda ch10
Tenda ch7
Tenda ch7g
Tenda cp3
Tenda cp3 Pro
Tenda cp7
Tenda tc3b14c
Tenda tc3b15c
Tenda tc3t14c
Tenda tc3t15c
Weaknesses CWE-74
CWE-77
CPEs cpe:2.3:h:tenda:ch10:*:*:*:*:*:*:*:*
cpe:2.3:h:tenda:ch7:*:*:*:*:*:*:*:*
cpe:2.3:h:tenda:ch7g:*:*:*:*:*:*:*:*
cpe:2.3:h:tenda:cp3:*:*:*:*:*:*:*:*
cpe:2.3:h:tenda:cp3_pro:*:*:*:*:*:*:*:*
cpe:2.3:h:tenda:cp7:*:*:*:*:*:*:*:*
cpe:2.3:h:tenda:tc3b14c:*:*:*:*:*:*:*:*
cpe:2.3:h:tenda:tc3b15c:*:*:*:*:*:*:*:*
cpe:2.3:h:tenda:tc3t14c:*:*:*:*:*:*:*:*
cpe:2.3:h:tenda:tc3t15c:*:*:*:*:*:*:*:*
Vendors & Products Tenda
Tenda ch10
Tenda ch7
Tenda ch7g
Tenda cp3
Tenda cp3 Pro
Tenda cp7
Tenda tc3b14c
Tenda tc3b15c
Tenda tc3t14c
Tenda tc3t15c
References
Metrics cvssV2_0

{'score': 10, 'vector': 'AV:N/AC:L/Au:N/C:C/I:C/A:C/E:POC/RL:ND/RC:UR'}

cvssV3_0

{'score': 9.8, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R'}

cvssV3_1

{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R'}

cvssV4_0

{'score': 9.3, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P'}

Weaknesses

Sources

Status
PUBLISHED
Assigner
VulDB
Published
Updated
Aug 14, 2026, 3:42 PM
Reserved
Aug 13, 2026, 2:39 PM
Status
Deferred
Published
Aug 13, 2026, 8:17 PM
Modified
Aug 14, 2026, 7:09 PM