What is the CVSS score of CVE-2026-1610?

CVE-2026-1610 has a CVSS 3.1 base score of 8.1 (High). CVSS vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Ax12 Pro Firmware are affected by CVE-2026-1610?

Ax12 Pro devices running firmware versions up to 16.03.49.24_cn contain hard-coded credentials that allow unauthorized access without authentication.

How to fix or mitigate CVE-2026-1610?

Within 24 hours: Inventory all Ax12 Pro devices and identify firmware versions in use; isolate affected devices from production networks if possible. Within 7 days: Contact Ax12 vendor for patch timeline and interim guidance; implement network segmentation to restrict access to affected devices; enforce strict access controls and monitoring. Within 30 days: Apply vendor patch immediately upon availability; conduct security audit of affected systems for unauthorized access indicators; reset all credentials and rotate authentication tokens.

Ax12 Pro Firmware CVE-2026-1610

HIGH

Use of Hard-coded Password (CWE-259)

2026-01-29 cna@vuldb.com

Authentication Bypass Ax12 Pro Firmware

8.1

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

8.1 HIGH

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 22:00 vuln.today

CVE Published

Jan 29, 2026 - 19:16 nvd

HIGH 8.1

DescriptionCVE.org

A vulnerability was found in Tenda AX12 Pro V2 16.03.49.24_cn. Affected by this issue is some unknown functionality of the component Telnet Service. Performing a manipulation results in hard-coded credentials. The attack is possible to be carried out remotely. A high degree of complexity is needed for the attack. The exploitation is known to be difficult. The exploit has been made public and could be used.

AnalysisAI

Ax12 Pro Firmware versions up to 16.03.49.24_cn is affected by use of hard-coded password (CVSS 8.1).

Technical ContextAI

This vulnerability (CWE-259: Use of Hard-coded Password) affects Ax12 Pro Firmware. was found in Tenda AX12 Pro V2 16.03.49.24_cn. Affected by this issue is some unknown functionality of the component Telnet Service. Performing a manipulation results in hard-coded credentials. The attack is possible to be carried out remotely. A high degree of complexity is needed for the attack. The exploitation is known to be difficult. The exploit has been made public and could be used.