Vendor

    Tenda

    1,959 known vulnerabilities in products by Tenda, 3 of them actively exploited (CISA KEV).

    Key figures

    1,959

    Vulnerabilities

    3

    Actively exploited (KEV)

    0

    Used by ransomware

    733

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority.

    Vulnerabilities in Tenda
    SeverityCVETitleCVSSPublished
    CriticalCVE-2021-31755

    Tenda AC11 Router Stack Buffer Overflow Vulnerability

    In CISA KEV

    9.8
    CriticalCVE-2020-10987

    Tenda AC1900 Router AC15 Model Remote Code Execution Vulnerability

    In CISA KEV

    9.8
    CriticalCVE-2018-14558

    Tenda AC7, AC9, and AC10 Routers Command Injection Vulnerability

    In CISA KEV

    9.8
    CriticalCVE-2026-11499

    Tenda HG7/HG9/HG10 formDOMAINBLK stack-based overflow

    9.8
    CriticalCVE-2026-86152

    Tenda CP3 Kylin AutoAddWifi.cpp ThreadProc os command injection

    10.0
    CriticalCVE-2026-86167

    Tenda HG10 Boa formgponConf os command injection

    9.9
    CriticalCVE-2026-86151

    Tenda CP3 Network Configuration Management system.c sub_2F77E8 os command injection

    9.1
    CriticalCVE-2026-86149

    Tenda CP3 NetCheckPing.cpp os command injection

    9.1
    CriticalCVE-2026-86148

    Tenda CP3 Kylin system.c SystemAsh os command injection

    9.1
    CriticalCVE-2026-19747

    Tenda CH7 ATE Module Kylin HandleCmd command injection

    9.8
    CriticalCVE-2025-14879

    Tenda WH450 HTTP Request onSSIDChange stack-based overflow

    9.8
    HighCVE-2026-7102

    Tenda F456 httpd WriteFacMac FromWriteFacMac command injection

    6.3
    CriticalCVE-2025-11418

    Tenda CH22 HTTP Request AdvSetWrlsafeset formWrlsafeset stack-based overflow

    9.8
    CriticalCVE-2025-15255

    Tenda W6-S R7websSsecurityHandler httpd stack-based overflow

    9.8
    CriticalCVE-2025-45779

    Tenda Ac10 Firmware 15.03.06.23 Cn: Buffer Overflow

    9.8
    CriticalCVE-2024-46048

    Tenda Fh451 Firmware: Command Injection

    9.8
    CriticalCVE-2025-9605

    Tenda AC21/AC23 GetParentControlInfo stack-based overflow

    9.8
    CriticalCVE-2022-42233

    Tenda 11n Firmware: Authentication Bypass

    9.8
    CriticalCVE-2023-46370

    Tenda W18e Firmware: Command Injection

    9.8
    CriticalCVE-2023-27076

    Tenda G103 Firmware: Command Injection

    9.8
    HighCVE-2025-8017

    Tenda AC7 httpd setMacFilterCfg formSetMacFilterCfg stack-based overflow

    8.8
    CriticalCVE-2025-11549

    Tenda W12 HTTP Request modules wifiMacFilterSet stack-based overflow

    8.8
    HighCVE-2026-11498

    Tenda HG7/HG9/HG10 Web Management voip_other_set asp_voip_OtherSet stack-based overflow

    8.8
    CriticalCVE-2022-32054

    Tenda Ac10 Firmware 15.03.06.23 Cn: Remote Code Execution

    9.8
    HighCVE-2026-7160

    Tenda HG3 formTracert command injection

    8.8

    All vulnerabilities in search

    News

    Products