CVE-2026-1610

A vulnerability was found in Tenda AX12 Pro V2 16.03.49.24_cn. Affected by this issue is some unknown functionality of the component Telnet Service. Performing a manipulation results in hard-coded credentials. The attack is possible to be carried out remotely. A high degree of complexity is needed for the attack. The exploitation is known to be difficult. The exploit has been made public and could be used.

• CWE-259
• CWE-798

• https://github.com/QIU-DIE/CVE/issues/49Broken Link, Issue Tracking
• https://vuldb.com/?ctiid.343378Permissions Required, VDB Entry
• https://vuldb.com/?id.343378Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.740766Third Party Advisory, VDB Entry
• https://www.tenda.com.cn/Product

Published

Jan 29, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-16094The Invisible Anti-Spam & CAPTCHA — reCAPTCHA Alternative fo…4.9
• CVE-2026-16095A flaw has been found in Shibby Tomato 1.28 RT-N5x MIPSR2 Bu…8.8
• CVE-2026-16096A vulnerability has been found in Shibby Tomato 1.28 RT-N5x …8.8
• CVE-2026-16097A vulnerability was found in Shibby Tomato 1.28. This vulner…8.8
• CVE-2026-16098The ProSolution WP Client plugin for WordPress is vulnerable…9.8
• CVE-2026-16099The Podlove Podcast Publisher plugin for WordPress is vulner…8.8
• CVE-2026-16100A flaw was found in the user-event metrics recording of Keyc…6.5
• CVE-2026-16101Spoofing an already bonded device can force either RS9116W o…8.8
• CVE-2026-16102A flaw was found in the Dynamic Client Registration (DCR) co…8.1
• CVE-2026-16103A flaw was found in the keycloak-services component of Keycl…4.3
• CVE-2026-16104A flaw was found in the authentication configuration endpoin…6.5
• CVE-2026-16105A flaw was found in the RoleContainerResource component of K…4.9