CVE-2026-38577Disclosure

LOWCVSS 9.8 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Insecure hardcoded credentials in the Admin account of Tenda HG21 V4.0.0-260302 allows attackers to gain root access.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

https://gist.github.com/Anmolsingh142/a4be5a8c483f57e0887c1fc9e28b9e78

Weakness type (CWE)

CWE-798

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

1 mentions across 1 observed day

What's happening

Technical details provided in 1 signal
Disclosure: 1 classified signal
1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

Disclosure

1100.0%

Referenced assets1 URL

By indicator

https://cybersecurity-news.de/tenda-hg21-cve-2026-38577-root-zugriff-hardcoded-credentials

Full discourse1 post

Cybersecurity News DE@cybsecuritynews46d
Disclosure
#endpointsecurity Tenda HG21: Kritische Schwachstelle ermöglicht Root-Zugriff über hart kodierte Admin-Zugangsdaten #cve202638577 #hg21 #tenda #v400260302 https://cybersecurity-news.de/tenda-hg21-cve-2026-38577-root-zugriff-hardcoded-credentials
Post summary
A critical vulnerability (CVE-2026-38577) in Tenda HG21 routers allows attackers to gain root access through hardcoded administrator credentials.
0000031
10 followersView on X

Explore more

Back to dashboard