Vulnerability · Published Aug 13, 2026 · Assigned by VulDB

CVE-2026-19750Tenda CH/CP/TX3 SSH hard-coded password

High 8.1

In plain English

A high-severity security flaw in CH from Tenda. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 57% of all known vulnerabilities).

Severity (CVSS 3.1)8.1High

Exploit odds (30 days)0.8%top 43.0% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

A flaw has been found in Tenda CH, CP and TX3 V21.x/V22.x/V25.x/V26.x/V27.x. Affected by this issue is some unknown functionality of the component SSH. Executing a manipulation can lead to use of hard-coded password. It is possible to launch the attack remotely. The attack requires a high level of complexity. The exploitation is known to be difficult. The exploit has been published and may be used.

Affected products (as reported)

Vendor	Product	Versions
Tenda	CH	V21.V22.V25.V26.V27.*
Tenda	CP	V21.V22.V25.V26.V27.*
Tenda	TX3	V21.V22.V25.V26.V27.*

Weakness: CWE-259, CWE-255 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:W/RC:R

References

VDB-389501 | Tenda CH/CP/TX3 SSH hard-coded password vdb-entry
VDB-389501 | CTI Indicators (IOB, IOC, TTP) signature, permissions-required
CVE-2026-19750 | CVE Analysis and Report third-party-advisory
Submit #868524 | Tenda Tenda Multiple IP Cameras Multiple Versions Hard-coded Credentials third-party-advisory
https://github.com/howitouchyou/Tenda-Smart-Camera-Vulnerability/blob/main/Tenda%20Camera%20SSH%20Hard-coded%20Password/Tenda%20Camera%20SSH%20Hard-coded%20Password.md exploit
https://www.tenda.com.cn/ product