Tenda AC10 vulnerabilities

2 CVEs affecting Tenda AC10, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-19924, published 2026-08-16.

More from Tenda.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-19924, published 2026-08-16. Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days. A security vulnerability has been detected in Tenda AC10 16.03.10.09_multi_TDE01. This vulnerability affects the function R7WebsSecurityHandler of the component httpd. The manipulation leads to…
• CVE-2026-16248, published 2026-07-20. High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days. A vulnerability was found in Tenda AC10 16.03.10.09_multi_TDE01. This issue affects the function fromAdvSetLanip of the file /goform/AdvSetLanip of the component httpd/netctrl. The manipulation of…