Is there a public PoC exploit available for CVE-2026-5549?

Yes, a public proof-of-concept exploit is available for CVE-2026-5549. Prioritise patching immediately. EPSS: 0.0%.

Tenda CVE-2026-5549

Q: What is the CVSS score of CVE-2026-5549?

CVE-2026-5549 has a CVSS 4.0 base score of 5.5 (Medium). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-19046 MEDIUM

Use of Hard-coded Cryptographic Key (CWE-321)

2026-04-05 VulDB

GHSA-7v8w-cr25-ggqq

Tenda Information Disclosure

5.5

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

5.5 MEDIUM

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

PoC Detected

Apr 07, 2026 - 13:20 vuln.today

Public exploit code

EUVD ID Assigned

Apr 05, 2026 - 08:15 euvd

EUVD-2026-19046

Analysis Generated

Apr 05, 2026 - 08:15 vuln.today

CVE Published

Apr 05, 2026 - 07:45 nvd

MEDIUM 5.5

DescriptionCVE.org

A vulnerability was determined in Tenda AC10 16.03.10.10_multi_TDE01. Affected by this issue is some unknown functionality of the file /webroot_ro/pem/privkeySrv.pem of the component RSA 2048-bit Private Key Handler. Executing a manipulation can lead to use of hard-coded cryptographic key . The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.

AnalysisAI

Tenda AC10 router firmware 16.03.10.10_multi_TDE01 exposes a hard-coded RSA 2048-bit private key in the world-readable file /webroot_ro/pem/privkeySrv.pem, allowing unauthenticated remote attackers to retrieve sensitive cryptographic material and decrypt encrypted communications. With publicly available exploit code and an EPSS score indicating moderate but real-world feasibility, this vulnerability enables information disclosure attacks against affected router configurations.

Technical ContextAI

This vulnerability exploits CWE-321 (Use of Hard-coded Cryptographic Key), a critical weakness in cryptographic key management. The Tenda AC10 router stores its RSA 2048-bit server private key in an unprotected file accessible via HTTP GET requests without authentication. RSA private keys are foundational to TLS/SSL encryption, certificate signing, and secure communications; exposure of this key completely compromises the confidentiality and authenticity guarantees provided by the router's HTTPS implementation. An attacker with network access to the router (CPE: cpe:2.3:a:tenda:ac10:*:*:*:*:*:*:*:*) can extract the key and decrypt all past and future TLS sessions, forge certificates, or impersonate the router to legitimate clients.

RemediationAI

Upgrade Tenda AC10 firmware to a patched version released by Tenda after the discovery of CVE-2026-5549; consult https://www.tenda.com.cn/ for the latest firmware release notes and supported versions. Interim mitigations include restricting network access to the router's web interface via firewall rules, disabling remote management if not required, and resetting or rotating any certificates that relied on the exposed private key. Verify firmware integrity after upgrade and regenerate any certificates that were signed with the compromised key. Consult VulDB entry https://vuldb.com/vuln/355313 for additional technical details and confirmation of patch availability.