Skip to content
OpenAdvisories

Vendor

Tenda

816 known vulnerabilities.

Products

CH22 42 AC15 37 FH1202 33 AC18 32 F453 30 AC7 30 F456 28 AC10U 26 FH451 23 AC8 21 WH450 21 AC20 20 F451 20 AC10 19 AC6 18 AC9 15 HG10 14 i21 14 AC1206 14 AC23 13 W15E 13 FH1201 13 W12 13 O3 12 W9 12 AC21 11 AC5 11 CP3 10 M3 10 HG9 10 O3V2 10 FH1205 10 F1202 9 W20E 9 FH1203 8 i3 8 A15 8 TX3 8 RX3 8 AC500 8
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 7.2
    CVE-2026-118238 Public exploit

    CVE-2026-118238

    The Tenda W18E web management server is vulnerable to OS command injection via the "diagnose" packet-capture feature due to improper validation of JSON fields. An authenticated user can inject shell metacharacters into the protocol or targetDevice fields, whi…

    Tenda W18E
  • High 8.8
    CVE-2026-11553 Public exploit

    Tenda HG7/HG9/HG10 formPPPEdit stack-based overflow

    A vulnerability was found in Tenda HG7, HG9 and HG10 300001138_en_xpon. This affects the function formPPPEdit of the file /boaform/formPPPEdit. The manipulation of the argument encodename results in stack-based buffer overflow. The attack can be launched remo…

    Tenda HG10 HG9 HG7
  • High 8.8
    CVE-2026-4961 Public exploit

    Tenda AC6 POST Request QuickIndex formQuickIndex stack-based overflow

    A vulnerability was identified in Tenda AC6 15.03.05.16. Affected by this vulnerability is the function formQuickIndex of the file /goform/QuickIndex of the component POST Request Handler. The manipulation of the argument PPPOEPassword leads to stack-based bu…

    Tenda AC6
  • High 8.8
    CVE-2025-7795 Public exploit

    Tenda FH451 P2pListFilter fromP2pListFilter stack-based overflow

    A vulnerability, which was classified as critical, has been found in Tenda FH451 1.0.0.9. Affected by this issue is the function fromP2pListFilter of the file /goform/P2pListFilter. The manipulation of the argument page leads to stack-based buffer overflow. T…

    Tenda FH451