cveboard RSS feed

CVE-2026-19748

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2026
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

Tenda CH7 Kylin Web Service CWebSessionManager_ParseSession entropy

A security vulnerability has been detected in Tenda CH7, CH7G, CH10, CP3, CP3 Pro, CP7, TC3B14C, TC3B15C, TC3T14C and TC3T15C up to 20260625. Affected is the function CWebSessionManager_ParseSession of the file /user/bin/Kylin of the component Kylin Web Service. Such manipulation of the argument SESSION leads to insufficient entropy. The attack may be performed from remote. Attacks of this nature are highly complex. The exploitability is told to be difficult.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

CH7

Vendor
Tenda
Product
CH7
Platforms
Unknown
Default status
Unknown
CH7 · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
20260625affectedUnavailableUnavailableUnavailableNone listed

CH7G

Vendor
Tenda
Product
CH7G
Platforms
Unknown
Default status
Unknown
CH7G · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
20260625affectedUnavailableUnavailableUnavailableNone listed

CH10

Vendor
Tenda
Product
CH10
Platforms
Unknown
Default status
Unknown
CH10 · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
20260625affectedUnavailableUnavailableUnavailableNone listed

CP3

Vendor
Tenda
Product
CP3
Platforms
Unknown
Default status
Unknown
CP3 · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
20260625affectedUnavailableUnavailableUnavailableNone listed

CP3 Pro

Vendor
Tenda
Product
CP3 Pro
Platforms
Unknown
Default status
Unknown
CP3 Pro · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
20260625affectedUnavailableUnavailableUnavailableNone listed

CP7

Vendor
Tenda
Product
CP7
Platforms
Unknown
Default status
Unknown
CP7 · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
20260625affectedUnavailableUnavailableUnavailableNone listed

TC3B14C

Vendor
Tenda
Product
TC3B14C
Platforms
Unknown
Default status
Unknown
TC3B14C · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
20260625affectedUnavailableUnavailableUnavailableNone listed

TC3B15C

Vendor
Tenda
Product
TC3B15C
Platforms
Unknown
Default status
Unknown
TC3B15C · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
20260625affectedUnavailableUnavailableUnavailableNone listed

TC3T14C

Vendor
Tenda
Product
TC3T14C
Platforms
Unknown
Default status
Unknown
TC3T14C · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
20260625affectedUnavailableUnavailableUnavailableNone listed

TC3T15C

Vendor
Tenda
Product
TC3T15C
Platforms
Unknown
Default status
Unknown
TC3T15C · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
20260625affectedUnavailableUnavailableUnavailableNone listed