Skip to content
Tenda Firmware vulnerabilities
-
tenda firmware
Hidden backdoor authentication mechanism in multiple versions of Tenda firmware allows admin access to web management interface
CVE-2026-11405
Public exploit
9.8 Critical
-
tenda ac7 firmware
In Tenda AC7 v15.03.06.44, the wanSpeed parameter of the route /goform/AdvSetMacMtuWan has a...
CVE-2026-51846
9.8 Critical
-
tenda ac7 firmware
Tenda AC7 v15.03.06.44 contains a stack buffer overflow vulnerability in the /goform...
CVE-2026-51845
9.8 Critical
-
tenda ac7 firmware
Tenda AC7 v15.03.06.44 contains a stack buffer overflow vulnerability in the /goform...
CVE-2026-51844
9.8 Critical
-
tenda ac7 firmware
Tenda AC7 v15.03.06.44 contains a stack buffer overflow vulnerability in the /goform...
CVE-2026-51843
9.8 Critical
-
tenda ac6, ac6 firmware +1 more
Tenda AC6 httpd getLogFile get_log_file os command injection
CVE-2026-8265
5.1 Medium
-
tenda ac6, ac6 firmware +1 more
Tenda AC6 httpd WifiApScan formWifiApScan os command injection
CVE-2026-8264
5.3 Medium
-
tenda ac6, ac10u firmware +1 more
Tenda AC6 httpd WifiExtraSet fromSetWirelessRepeat os command injection
CVE-2026-8263
5.1 Medium
-
tenda ac6, ac6 firmware +1 more
Tenda AC6 httpd telnet os command injection
CVE-2026-8259
5.1 Medium
-
tenda cx12l, cx12l firmware +1 more
Tenda CX12L SetPptpServerCfg” formSetPPTPServer stack-based overflow
CVE-2026-8138
8.7 High
-
tenda 4g300, 4g300 firmware +1 more
Tenda 4G300 SafeMacFilter sub_427C3C stack-based overflow
CVE-2026-7470
8.7 High
-
tenda 4g300, 4g300 firmware +1 more
Tenda 4G300 DelFil sub_425A28 command injection
CVE-2026-7469
5.3 Medium
-
tenda a300 firmware, fh303/a300, fh303 firmware +2 more
Tenda FH303/A300 V5.07.68_EN Cookie Session Weakness DNS Change
CVE-2018-25318
9.3 Critical
-
tenda a302, w3002r, w309r +3 more +5 more
Tenda W3002R/A302/W309R V5.07.64_en Cookie Session Weakness DNS Change
CVE-2018-25317
9.3 Critical
-
tenda w308r v2, w308r firmware +1 more
Tenda W308R v2 V5.07.48 Cookie Session Weakness DNS Change
CVE-2018-25316
9.3 Critical
-
tenda hg3, hg3 firmware +1 more
Tenda HG3 formTracert command injection
CVE-2026-7160
8.7 High
-
tenda hg3, hg3 firmware +1 more
Tenda HG3 formIPv6Routing formUploadConfig stack-based overflow
CVE-2026-7151
8.7 High
-
tenda hg3, hg3 firmware +1 more
Tenda HG3 formCountrystr os command injection
CVE-2026-7119
8.7 High
-
tenda f456, f456 firmware +1 more
Tenda F456 httpd WriteFacMac FromWriteFacMac command injection
CVE-2026-7102
5.3 Medium
-
tenda f456, f456 firmware +1 more
Tenda F456 httpd WrlclientSet fromWrlclientSet buffer overflow
CVE-2026-7101
8.7 High
-
tenda f456, f456 firmware +1 more
Tenda F456 httpd Natlimit fromNatlimitof buffer overflow
CVE-2026-7100
8.7 High
-
tenda f456, f456 firmware +1 more
Tenda F456 httpd QuickIndex formQuickIndex buffer overflow
CVE-2026-7099
8.7 High
-
tenda f456, f456 firmware +1 more
Tenda F456 httpd DhcpListClient fromDhcpListClient buffer overflow
CVE-2026-7098
8.7 High
-
tenda f456, f456 firmware +1 more
Tenda F456 httpd webExcptypemanFilter fromwebExcptypemanFilter buffer overflow
CVE-2026-7097
8.7 High
-
tenda hg3, hg3 firmware +1 more
Tenda HG3 formgponConf os command injection
CVE-2026-7096
8.7 High
-
tenda f456, f456 firmware +1 more
Tenda F456 httpd WrlExtraSet formWrlExtraSet buffer overflow
CVE-2026-7082
8.7 High
-
tenda f456, f456 firmware +1 more
Tenda F456 httpd GstDhcpSetSer fromGstDhcpSetSer buffer overflow
CVE-2026-7081
8.7 High
-
tenda f456, f456 firmware +1 more
Tenda F456 httpd PPTPUserSetting fromPPTPUserSetting buffer overflow
CVE-2026-7080
8.7 High
-
tenda f456, f456 firmware +1 more
Tenda F456 httpd AdvSetWan fromAdvSetWan buffer overflow
CVE-2026-7079
8.7 High
-
tenda f456, f456 firmware +1 more
Tenda F456 httpd SetIpBind fromSetIpBind buffer overflow
CVE-2026-7078
8.7 High
-
tenda ac18 firmware
A command injection vulnerability exists in Tenda AC18 V15.03.05.05_multi. The vulnerability is...
CVE-2026-31255
9.8 Critical
-
tenda f456, f456 firmware +1 more
Tenda F456 httpd setcfm buffer overflow
CVE-2026-7057
8.7 High
-
tenda f456, f456 firmware +1 more
Tenda F456 httpd SafeUrlFilter fromSafeUrlFilter buffer overflow
CVE-2026-7056
8.7 High
-
tenda f456, f456 firmware +1 more
Tenda F456 httpd VirtualSer fromVirtualSer buffer overflow
CVE-2026-7055
8.7 High
-
tenda f456, f456 firmware +1 more
Tenda F456 httpd PPTPDClient fromPptpUserAdd buffer overflow
CVE-2026-7054
8.7 High
-
tenda f456, f456 firmware +1 more
Tenda F456 httpd L7Prot frmL7ProtForm buffer overflow
CVE-2026-7053
8.7 High
-
tenda i9, i9 firmware +1 more
Tenda i9 HTTP R7WebsSecurityHandlerfunction path traversal
CVE-2026-7036
6.9 Medium
-
tenda fh1202, fh1202 firmware +1 more
Tenda FH1202 httpd WrlclientSet fromWrlclientSet stack-based overflow
CVE-2026-7035
8.7 High
-
tenda fh1202, fh1202 firmware +1 more
Tenda FH1202 httpd WrlExtraSet stack-based overflow
CVE-2026-7034
8.7 High
-
tenda f456, f456 firmware +1 more
Tenda F456 SafeClientFilter fromSafeClientFilter buffer overflow
CVE-2026-7033
8.7 High
-
tenda f456, f456 firmware +1 more
Tenda F456 SafeEmailFilter buffer overflow
CVE-2026-7032
8.7 High
-
tenda f456, f456 firmware +1 more
Tenda F456 SafeMacFilter fromSafeMacFilter buffer overflow
CVE-2026-7031
8.7 High
-
tenda f456, f456 firmware +1 more
Tenda F456 RouteStatic fromRouteStatic buffer overflow
CVE-2026-7030
8.7 High
-
tenda f456, f456 firmware +1 more
Tenda F456 addressNat fromaddressNat buffer overflow
CVE-2026-7029
8.7 High
-
tenda f456, f456 firmware +1 more
Tenda F456 P2pListFilter fromP2pListFilter buffer overflow
CVE-2026-7019
8.7 High
-
tenda f453, f453 firmware +1 more
Tenda F453 Telnet Service telnet TendaTelnet command injection
CVE-2026-6989
5.3 Medium
-
tenda hg10, hg10 firmware +1 more
Tenda HG10 Boa Service formRouting formRoute buffer overflow
CVE-2026-6988
8.7 High
-
tenda w30e firmware
Tenda W30E V2.0 V16.01.0.21 was found to contain a command injection vulnerability in the...
CVE-2026-38835
9.8 Critical
-
tenda w30e firmware
Tenda W30E V2.0 V16.01.0.21 was found to contain a command injection vulnerability in the...
CVE-2026-38834
7.3 High
-
tenda f451, f451 firmware +1 more
Tenda F451 AdvSetWan fromAdvSetWan stack-based overflow
CVE-2026-6137
8.7 High
- Show olderLoading…