PT-2026-30420 · Tenda · Ac10

Corenode · Published 2026-04-05 · Updated 2026-04-05 · CVE-2026-5549

Mitre

CVSS v3.1

5.3

Medium

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

A vulnerability was determined in Tenda AC10 16.03.10.10 multi TDE01. Affected by this issue is some unknown functionality of the file /webroot ro/pem/privkeySrv.pem of the component RSA 2048-bit Private Key Handler. Executing a manipulation can lead to use of hard-coded cryptographic key . The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.

Exploit

Fix

Weakness Enumeration

CWE-320

CWE-321

Related Identifiers

CVE-2026-5549

Affected Products

Ac10

References · 6

• 🔥 https://github.com/somanyerrors/tenda-ac10v4-vulnerabilities/blob/main/findings/CRITICAL-05-exposed-rsa-private-key.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-5549 · Security Note
• https://vuldb.com/vuln/355313 · Note
• https://vuldb.com/vuln/355313/cti · Note
• https://vuldb.com/submit/782298 · Note
• https://tenda.com.cn · Note