CVE-2026-1610CWE-259CWE-798

Tenda AX12 Pro V2 Telnet Service hard-coded credentials

Critical · published January 29, 2026

CVSS v4.0
9.2
EPSS
1%
Percentile
54.2
In the wild
Unconfirmed
What it is

🚨 A remote attacker can exploit hard-coded credentials in the Telnet Service of Tenda AX12 Pro V2, making this a ticket to a digital disaster! 🔥 Imagine leaving your front door wide open with the keys still in the lock — that’s like allowing an attacker to waltz in without a struggle. This vulnerability is a sneaky backdoor that could give unauthorized access to your network, as hard-coded credentials are just waiting to be discovered. If exploited, this flaw could lead to unauthorized access to the device, allowing an attacker to manipulate settings, leak sensitive information, or even hijack your network. The ramifications could be absolutely devastating if someone with malicious intent takes the plunge before you patch it!

Put simply

Imagine leaving your front door wide open with the keys still in the lock — that’s like allowing an attacker to waltz in without a struggle. This vulnerability is a sneaky backdoor that could give unauthorized access to your network, as hard-coded credentials are just waiting to be discovered. This vulnerability exists due to hard-coded credentials within the Telnet Service of the Tenda AX12 Pro V2. An attacker could use these credentials to gain remote access to the device, jeopardizing your network security.

What to do

If exploited, this flaw could lead to unauthorized access to the device, allowing an attacker to manipulate settings, leak sensitive information, or even hijack your network. The ramifications could be absolutely devastating if someone with malicious intent takes the plunge before you patch it! To safeguard against this vulnerability, update your Tenda AX12 Pro V2 to the latest firmware version as soon as possible. If the patch is not yet available, consider disabling Telnet service until a fix is implemented. Regularly check for updates to stay ahead of vulnerabilities! You've got this! Follow these steps, and you'll fortify your defenses in no time! 🛡️

The record
Technical detail
CVSS v4.0
9.2 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
EPSS
0.00743 · 54.2th percentile
Weaknesses
CWE-259 · Use of Hard-coded Password; CWE-798 · Use of Hard-coded Credentials
Published
2026-01-29T19:02Z
EPSS history
Timeline
  • 29 JAN 19:02Z
    Tenda AX12 Pro V2 Telnet Service hard-coded credentials
    cvelistv5