Tenda
Vulnerability activity for Tenda: what is being exploited, what was published lately, and when the next patch release is due.
Last 30 days
- CVEs
- 3
- Critical (CVSS 9+)
- 1
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 90 days
- CVEs
- 3
- Critical (CVSS 9+)
- 1
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 365 days
- CVEs
- 14
- Critical (CVSS 9+)
- 2
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Exploited now
CVEs on CISA's known-exploited list, newest first. "Days to KEV" counts from the CVE's publication.
- 9.8CriticalOct 30, 2018Tenda AC7, AC9, and AC10 Routers Code / command injectionCVE-2018-14558Tenda AC7, AC9, and AC10 devices contain a command injection vulnerability due to the "formsetUsbUnload" function executes a dosystemCmd function with untrusted input. Successful exploitation allows an attacker to execute OS commands via a crafted goform/setUsbUnload request.Added to KEV Nov 3, 2021 · 1,099 days after publicationExploited8.5% likely
- 9.8CriticalJul 13, 2020Tenda AC1900 Router AC15 Model Code / command injectionCVE-2020-10987Tenda AC1900 Router AC15 Model contains an unspecified vulnerability that allows remote attackers to execute system commands via the deviceName POST parameter.Added to KEV Nov 3, 2021 · 477 days after publicationExploited80% likelyExploit codeNucleiDetection
- 9.8CriticalMay 7, 2021Tenda AC11 Router Memory corruptionCVE-2021-31755Tenda AC11 devices contain a stack buffer overflow vulnerability in /goform/setmac which allows attackers to execute code via a crafted post request.Added to KEV Nov 3, 2021 · 179 days after publicationExploited87% likelyExploit codeNucleiDetection
Recent
- 3.7LowOct 23, 2026Tenda F6 Crypto / certificateCVE-2026-115797A weakness has been identified in Tenda F6 12.02.01.73. Affected is an unknown function of the component Web Management Interface. Executing a manipulation of the argument ecos_pw can lead to cleartext transmission of sensitive information. The attack may be launched remotely. This attack is characterized by high complexity. The exploitability is told to be difficult. The exploit has been made available to the public and could be used for attacks.
- 4.3MediumOct 23, 2026Tenda F6 CSRFCVE-2026-115796A security flaw has been discovered in Tenda F6 12.02.01.73. This impacts an unknown function of the component Web Management Interface. Performing a manipulation results in cross-site request forgery. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks.
- 10.0CriticalOct 21, 2026Tenda AC19 Memory corruptionCVE-2026-113744A security vulnerability has been detected in Tenda AC19 16.03.10.07. The impacted element is the function formSetFirewallCfg of the file /goform/SetFirewallCfg of the component httpd Web Management Service. Such manipulation of the argument firewallEn leads to stack-based buffer overflow. The attac
- 8.8HighJul 14, 2026Tenda BE12 Pro Memory corruptionCVE-2026-15696A vulnerability has been found in Tenda BE12 Pro 16.03.66.23. The impacted element is the function fromVirtualSer of the file /goform/VirtualSer. Such manipulation of the argument page leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
- 8.8HighJul 14, 2026Tenda BE12 Pro Memory corruptionCVE-2026-15695A flaw has been found in Tenda BE12 Pro 16.03.66.23. The affected element is the function fromDhcpListClient of the file /goform/DhcpListClient. This manipulation of the argument page causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been published and may be used.
- 8.8HighJul 14, 2026Tenda BE12 Pro Memory corruptionCVE-2026-15694A vulnerability was detected in Tenda BE12 Pro 16.03.66.23. Impacted is the function fromSetIpBind of the file /goform/SetIpBind. The manipulation of the argument page results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit is now public and may be used.
- 8.8HighJul 14, 2026Tenda BE12 Pro Memory corruptionCVE-2026-15693A security vulnerability has been detected in Tenda BE12 Pro 16.03.66.23. This issue affects the function fromSafeMacFilter of the file /goform/SafeMacFilter. The manipulation of the argument page leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used.
- 8.8HighJul 14, 2026Tenda BE12 Pro Memory corruptionCVE-2026-15692A weakness has been identified in Tenda BE12 Pro 16.03.66.23. This vulnerability affects the function fromSafeUrlFilter of the file /goform/SafeUrlFilter. Executing a manipulation of the argument page can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks.
- 8.8HighJul 14, 2026Tenda BE12 Pro Memory corruptionCVE-2026-15691A security flaw has been discovered in Tenda BE12 Pro 16.03.66.23. This affects the function fromSafeClientFilter of the file /goform/SafeClientFilter. Performing a manipulation of the argument page results in stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks.
- 9.8CriticalJul 6, 2026Tenda firmwareCVE-2026-11405The web server binary /bin/httpd contains a hidden backdoor authentication mechanism in the login() function at 004c88b8. - The function contains a normal authentication path using MD5/hash-based password verification (prod_encode64/PasswordToMd5/check_rand_key). - After normal authentication fails, it calls GetValue("sys.rzadmin.password") to read a backdoor password from the device configuration. - It performs a direct strcmp() comparison (plaintext, not hashed) between the config value a
- 8.8HighApr 10, 2026Tenda f451 firmware Memory corruptionCVE-2026-5989A flaw has been found in Tenda F451 1.0.0.7. Affected is the function fromRouteStatic of the file /goform/RouteStatic. Executing a manipulation of the argument page can lead to stack-based buffer overflow. The attack can be launched remotely. The exploit has been published and may be used.
- 8.8HighMar 27, 2026Tenda ac6 firmware Memory corruptionCVE-2026-4961A vulnerability was identified in Tenda AC6 15.03.05.16. Affected by this vulnerability is the function formQuickIndex of the file /goform/QuickIndex of the component POST Request Handler. The manipulation of the argument PPPOEPassword leads to stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit is publicly available and might be used.
- 8.8HighJan 6, 2026Tenda ac23 firmware Memory corruptionCVE-2026-0640A weakness has been identified in Tenda AC23 16.03.07.52. This affects the function sscanf of the file /goform/PowerSaveSet. Executing a manipulation of the argument Time can lead to buffer overflow. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks.3.5% likely
- 7.5HighOct 30, 2025Tenda ac8 firmware Memory corruptionCVE-2025-61498A buffer overflow in the UPnP service of Tenda AC8 Hardware v03.03.10.01 allows attackers to cause a Denial of Service (DoS) via supplying a crafted packet.
- 9.8CriticalFeb 27, 2023Tenda it7-lcs firmware Code / command injectionCVE-2023-23080Certain Tenda products are vulnerable to command injection. This affects Tenda CP7 Tenda CP7<=V11.10.00.2211041403 and Tenda CP3 v.10 Tenda CP3 v.10<=V20220906024_2025 and Tenda IT7-PCS Tenda IT7-PCS<=V2209020914 and Tenda IT7-LCS Tenda IT7-LCS<=V2209020914 and Tenda IT7-PRS Tenda IT7-PRS<=V2209020908.2.5% likely
- 9.8CriticalMay 7, 2021Tenda AC11 Router Memory corruptionCVE-2021-31755Tenda AC11 devices contain a stack buffer overflow vulnerability in /goform/setmac which allows attackers to execute code via a crafted post request.Exploited87% likelyExploit codeNucleiDetection
- 9.8CriticalJul 13, 2020Tenda AC1900 Router AC15 Model Code / command injectionCVE-2020-10987Tenda AC1900 Router AC15 Model contains an unspecified vulnerability that allows remote attackers to execute system commands via the deviceName POST parameter.Exploited80% likelyExploit codeNucleiDetection
- 9.8CriticalOct 30, 2018Tenda AC7, AC9, and AC10 Routers Code / command injectionCVE-2018-14558Tenda AC7, AC9, and AC10 devices contain a command injection vulnerability due to the "formsetUsbUnload" function executes a dosystemCmd function with untrusted input. Successful exploitation allows an attacker to execute OS commands via a crafted goform/setUsbUnload request.Exploited8.5% likely
Top products
- BE12 Pro6 CVEs in the last year
- F62 CVEs in the last year
- firmware1 CVE in the last year, 1 critical
- f451 firmware1 CVE in the last year
- ac8 firmware1 CVE in the last year
- ac6 firmware1 CVE in the last year
- ac23 firmware1 CVE in the last year
- AC191 CVE in the last year, 1 critical
Counts cover CVEs and advisories Watch Floor tracks, by the date they became news. Updated every 10 minutes.