CVE-2026-38577

CVSS 9.8 (critical) ยท published 2026-08-31

Insecure hardcoded credentials in the Admin account of Tenda HG21 V4.0.0-260302 allows attackers to gain root access.

Weakness: CWE-798

Source: NVD CVE-2026-38577

References

Check your software

Connect an AI agent to the Fixlane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.