Skip to content
OpenAdvisories

Vendor

Tenda

816 known vulnerabilities.

3 results · Clear filters · Feed

  • Medium 4.7
    CVE-2026-4253 Public exploit

    Tenda AC8 Web UploadCfg route_set_user_policy_rule os command injection

    A security flaw has been discovered in Tenda AC8 16.03.50.11. This affects the function route_set_user_policy_rule of the file /cgi-bin/UploadCfg of the component Web Interface. The manipulation of the argument wans.policy.list1 results in os command injectio…

  • Medium 6.3
    CVE-2025-9090 Public exploit EPSS 17%

    Tenda AC20 Telnet Service telnet websFormDefine command injection

    A vulnerability was identified in Tenda AC20 16.03.08.12. Affected is the function websFormDefine of the file /goform/telnet of the component Telnet Service. The manipulation leads to command injection. It is possible to launch the attack remotely. The exploi…

  • Medium 5.3
    CVE-2025-2995 Public exploit

    Tenda FH1202 Web Management Interface SysToolChangePwd access control

    A vulnerability has been found in Tenda FH1202 1.2.0.14(408) and classified as critical. This vulnerability affects unknown code of the file /goform/SysToolChangePwd of the component Web Management Interface. The manipulation leads to improper access controls…