LIVE · cybersecurity feed
Live wire
vendor

Tenda

27 CVEs published in the last four months and 3 stories. Exploited flaws first.

Critical7
High18
Medium2
Exploited (KEV)0

All recent CVEs

CVECVSSSeverityProductSummaryPublished
CVE-2026-518469.8criticalac7 firmwareIn Tenda AC7 v15.03.06.44, the wanSpeed parameter of the route /goform/AdvSetMacMtuWan has a stack buffer overflow124d ago
CVE-2026-42529.8criticalac8 firmwareA vulnerability was identified in Tenda AC8 16.03.50.11.219d ago
CVE-2026-42549.8criticalac8 firmwareA weakness has been identified in Tenda AC8 up to 16.03.50.11.219d ago
CVE-2026-45679.8criticala15 firmwareA vulnerability has been found in Tenda A15 15.13.07.13.213d ago
CVE-2026-518439.8criticalac7 firmwareTenda AC7 v15.03.06.44 contains a stack buffer overflow vulnerability in the /goform/AdvSetMacMtuWan interface via124d ago
CVE-2026-518449.8criticalac7 firmwareTenda AC7 v15.03.06.44 contains a stack buffer overflow vulnerability in the /goform/AdvSetMacMtuWan interface via124d ago
CVE-2026-518459.8criticalac7 firmwareTenda AC7 v15.03.06.44 contains a stack buffer overflow vulnerability in the /goform/AdvSetMacMtuWan interface via124d ago
CVE-2026-39768.8highw3 firmwareA weakness has been identified in Tenda W3 1.0.0.3(2204).224d ago
CVE-2026-40078.8highw3 firmwareA vulnerability was detected in Tenda W3 1.0.0.3(2204).224d ago
CVE-2026-40088.8highw3 firmwareA flaw has been found in Tenda W3 1.0.0.3(2204).224d ago
CVE-2026-40418.8highi12 firmwareA security flaw has been discovered in Tenda i12 1.0.0.6(2204).223d ago
CVE-2026-40428.8highi12 firmwareA weakness has been identified in Tenda i12 1.0.0.6(2204).223d ago
CVE-2026-40438.8highi12 firmwareA security vulnerability has been detected in Tenda i12 1.0.0.6(2204).223d ago
CVE-2026-39738.8highw3 firmwareA vulnerability was determined in Tenda W3 1.0.0.3(2204).224d ago
CVE-2026-39758.8highw3 firmwareA security flaw has been discovered in Tenda W3 1.0.0.3(2204).224d ago
CVE-2026-45658.8highac21 firmwareA vulnerability was detected in Tenda AC21 16.03.08.16.213d ago
CVE-2026-45348.8highfh451 firmwareA flaw has been found in Tenda FH451 1.0.0.9.214d ago
CVE-2026-45358.8highfh451 firmwareA vulnerability has been found in Tenda FH451 1.0.0.9.214d ago
CVE-2026-39748.8highw3 firmwareA vulnerability was identified in Tenda W3 1.0.0.3(2204).224d ago
CVE-2026-45528.8highf453 firmwareA vulnerability was determined in Tenda F453 1.0.0.3.213d ago
CVE-2026-45538.8highf453 firmwareA vulnerability was identified in Tenda F453 1.0.0.3.213d ago
CVE-2026-45518.8highf453 firmwareA vulnerability was found in Tenda F453 1.0.0.3.213d ago
CVE-2026-39708.8highi3 firmwareA flaw has been found in Tenda i3 1.0.0.6(2204).224d ago
CVE-2026-39718.8highi3 firmwareA vulnerability has been found in Tenda i3 1.0.0.6(2204).224d ago
CVE-2026-39728.8highw3 firmwareA vulnerability was found in Tenda W3 1.0.0.3(2204).224d ago
CVE-2026-45546.3mediumf453 firmwareA security flaw has been discovered in Tenda F453 1.0.0.3.213d ago
CVE-2026-42534.7mediumac8 firmwareA security flaw has been discovered in Tenda AC8 16.03.50.11.219d ago

Filter the full tracker by Tenda →

Our coverage of Tenda

CVE-2026-11405critical

Tenda Firmware Vulnerability Allows Unauthenticated Admin Access

A critical vulnerability has been identified in the firmware of Tenda devices, allowing attackers to gain administrative access without authentication. The flaw, tracked as CVE-2026-11405, affects the web management interface of the affected devices.

vulnerabilityhigh

Hidden backdoor in Tenda router firmware grants admin access

A security vulnerability has been discovered in the firmware of several Tenda router models, creating a hidden backdoor that could allow unauthorized administrative access. The issue, tracked as CVE-2026-11405, stems from an undocumented authentication mechanism within the device's web server.

CVE-2026-11405high

CERT/CC Warns of Hidden Admin Backdoor in Tenda Router Firmware

A significant security vulnerability has been discovered in the firmware of several Tenda router models, potentially exposing users to unauthorized administrative access. The CERT Coordination Center (CERT/CC) has issued a warning about this hidden backdoor, which allows attackers to bypass normal authentication procedures and gain control over the router's web interface.