CVE-2026-19747

Tenda CH7 ATE Module Kylin HandleCmd command injection

State: Published
Severity: 9.3 Critical
Published: Aug 13, 2026
Updated: Aug 14, 2026
Reserved: Aug 13, 2026

Description

A weakness has been identified in Tenda CH7, CH7G, CH10, CP3, CP3 Pro, CP7, TC3B14C, TC3B15C, TC3T14C and TC3T15C up to 20260625. This impacts the function CAte::HandleCmd of the file Kylin of the component ATE Module. This manipulation causes command injection. The attack is possible to be carried out remotely.

Scores

CVSS	Score	Vector	Source
4.0	9.3 Critical	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P	VulDB
3.1	9.8 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R	VulDB
3.0	9.8 Critical	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R	VulDB
2.0	10.0 High	AV:N/AC:L/Au:N/C:C/I:C/A:C/E:POC/RL:ND/RC:UR	VulDB

Weaknesses

CWE-77 Command Injection
CWE-74 Injection

Affected Products

Product	Versions
CH7Tenda	20260625Affected
CH7GTenda	20260625Affected
CH10Tenda	20260625Affected
CP3Tenda	20260625Affected
CP3 ProTenda	20260625Affected
CP7Tenda	20260625Affected
TC3B14CTenda	20260625Affected
TC3B15CTenda	20260625Affected
TC3T14CTenda	20260625Affected
TC3T15CTenda	20260625Affected

References

VDB-389498 | Tenda CH7 ATE Module Kylin HandleCmd command injectionvdb-entrytechnical-description
VDB-389498 | CTI Indicators (IOB, IOC, TTP, IOA)signaturepermissions-required
CVE-2026-19747 | CVE Analysis and Reportthird-party-advisory
Submit #868463 | Tenda Tenda Multiple IP Cameras Multiple Versions Command Injectionthird-party-advisory
https://github.com/howitouchyou/Tenda-Smart-Camera-Vulnerability/blob/main/Tenda%20Command%20Injection/Tenda%20Command%20Injection.mdrelated
https://www.tenda.com.cn/product

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.