Skip to content
OpenAdvisories

Vendor

Tenda

816 known vulnerabilities.

Products

CH22 42 AC15 37 FH1202 33 AC18 32 F453 30 AC7 30 F456 28 AC10U 26 FH451 23 AC8 21 WH450 21 AC20 20 F451 20 AC10 19 AC6 18 AC9 15 HG10 14 i21 14 AC1206 14 AC23 13 W15E 13 FH1201 13 W12 13 O3 12 W9 12 AC21 11 AC5 11 CP3 10 M3 10 HG9 10 O3V2 10 FH1205 10 F1202 9 W20E 9 FH1203 8 i3 8 A15 8 TX3 8 RX3 8 AC500 8
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-11405 Public exploit

    Hidden backdoor authentication mechanism in multiple versions of Tenda firmware allows admin access to web management interface

    The web server binary /bin/httpd contains a hidden backdoor authentication mechanism in the login() function at 004c88b8. - The function contains a normal authentication path using MD5/hash-based password verification (prod_encode64/PasswordToMd5/check_rand_k…

    Tenda firmware
  • Critical 9.8
    CVE-2026-11499 Public exploit

    Tenda HG7/HG9/HG10 formDOMAINBLK stack-based overflow

    A vulnerability was determined in Tenda HG7, HG9 and HG10 300001138_en_xpon. This affects the function formDOMAINBLK of the file /boaform/formDOMAINBLK. Executing a manipulation of the argument blkDomain can lead to stack-based buffer overflow. The attack may…

    Tenda HG10 HG9 HG7
  • Critical 9.8
    CVE-2026-4567 Public exploit

    Tenda A15 UploadCfg stack-based overflow

    A vulnerability has been found in Tenda A15 15.13.07.13. The impacted element is the function UploadCfg of the file /cgi-bin/UploadCfg. The manipulation of the argument File leads to stack-based buffer overflow. The attack may be initiated remotely. The explo…

    Tenda A15