CVE-2026-38577

Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days.

Insecure hardcoded credentials in the Admin account of Tenda HG21 V4.0.0-260302 allows attackers to gain root access.

Published 2026-08-31. Last modified 2026-09-01.