Vendor
Tenda
1,959 known vulnerabilities in products by Tenda, 3 of them actively exploited (CISA KEV).
Key figures
1,959
Vulnerabilities
3
Actively exploited (KEV)
0
Used by ransomware
733
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority.
| Severity | CVE | Title | CVSS | Published |
|---|---|---|---|---|
| Critical | CVE-2021-31755 | Tenda AC11 Router Stack Buffer Overflow Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2020-10987 | Tenda AC1900 Router AC15 Model Remote Code Execution Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2018-14558 | Tenda AC7, AC9, and AC10 Routers Command Injection Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2026-11499 | Tenda HG7/HG9/HG10 formDOMAINBLK stack-based overflow | 9.8 | |
| Critical | CVE-2026-86152 | Tenda CP3 Kylin AutoAddWifi.cpp ThreadProc os command injection | 10.0 | |
| Critical | CVE-2026-86167 | Tenda HG10 Boa formgponConf os command injection | 9.9 | |
| Critical | CVE-2026-86151 | Tenda CP3 Network Configuration Management system.c sub_2F77E8 os command injection | 9.1 | |
| Critical | CVE-2026-86149 | Tenda CP3 NetCheckPing.cpp os command injection | 9.1 | |
| Critical | CVE-2026-86148 | Tenda CP3 Kylin system.c SystemAsh os command injection | 9.1 | |
| Critical | CVE-2026-19747 | Tenda CH7 ATE Module Kylin HandleCmd command injection | 9.8 | |
| Critical | CVE-2025-14879 | Tenda WH450 HTTP Request onSSIDChange stack-based overflow | 9.8 | |
| High | CVE-2026-7102 | Tenda F456 httpd WriteFacMac FromWriteFacMac command injection | 6.3 | |
| Critical | CVE-2025-11418 | Tenda CH22 HTTP Request AdvSetWrlsafeset formWrlsafeset stack-based overflow | 9.8 | |
| Critical | CVE-2025-15255 | Tenda W6-S R7websSsecurityHandler httpd stack-based overflow | 9.8 | |
| Critical | CVE-2025-45779 | Tenda Ac10 Firmware 15.03.06.23 Cn: Buffer Overflow | 9.8 | |
| Critical | CVE-2024-46048 | Tenda Fh451 Firmware: Command Injection | 9.8 | |
| Critical | CVE-2025-9605 | Tenda AC21/AC23 GetParentControlInfo stack-based overflow | 9.8 | |
| Critical | CVE-2022-42233 | Tenda 11n Firmware: Authentication Bypass | 9.8 | |
| Critical | CVE-2023-46370 | Tenda W18e Firmware: Command Injection | 9.8 | |
| Critical | CVE-2023-27076 | Tenda G103 Firmware: Command Injection | 9.8 | |
| High | CVE-2025-8017 | Tenda AC7 httpd setMacFilterCfg formSetMacFilterCfg stack-based overflow | 8.8 | |
| Critical | CVE-2025-11549 | Tenda W12 HTTP Request modules wifiMacFilterSet stack-based overflow | 8.8 | |
| High | CVE-2026-11498 | Tenda HG7/HG9/HG10 Web Management voip_other_set asp_voip_OtherSet stack-based overflow | 8.8 | |
| Critical | CVE-2022-32054 | Tenda Ac10 Firmware 15.03.06.23 Cn: Remote Code Execution | 9.8 | |
| High | CVE-2026-7160 | Tenda HG3 formTracert command injection | 8.8 |
News
- Unpatched Backdoor in Tenda Firmware Grants Admin Access to Devicessecurityweek,
- CERT/CC Warns of Hidden Admin Backdoor in Tenda Router Firmwarethehackernews,
- CERT/CC Warns of Hidden Backdoor in Tenda Firmwaresans-newsbites-mail,