Tenda

Records1963All Threatist records

Exploited (KEV)3In CISA KEV

CVSS critical647CVSS 9.0–10.0

CVSS high1091CVSS 7.0–8.9

Exploited now

Tenda records in CISA KEV

TI-2018-10434 Tenda AC7, AC9, and AC10 Routers Command Injection Vulnerability CRITICAL 100KEV 2021-11-03 TI-2020-08863 Tenda AC1900 Router AC15 Model Remote Code Execution Vulnerability CRITICAL 100KEV 2021-11-03 TI-2021-11772 Tenda AC11 Router Stack Buffer Overflow Vulnerability CRITICAL 100KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records

Ac6 Firmware 108 records HIGH Ac18 Firmware 103 records HIGH Ac10 Firmware 92 records CRITICAL Ac9 Firmware 92 records CRITICAL Ac15 Firmware 85 records CRITICAL Ac7 Firmware 72 records CRITICAL Fh1202 Firmware 63 records HIGH W30e Firmware 63 records HIGH

Records

1963 records

TI-2021-11772 CVE-2021-31755 · GHSA-539c-2w6v-9rwx

An issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104_CN.

CRITICAL 100KEV

An issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104_CN.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.86511 Published 2021-05-07 No fix listed CWE-787

TI-2020-08863 CVE-2020-10987 · GHSA-r3xc-9hm9-gf29

The goform/setUsbUnload endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote…

CRITICAL 100KEV

The goform/setUsbUnload endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers to execute arbitrary system commands via the deviceName POST parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.7981 Published 2020-07-13 No fix listed CWE-78

TI-2018-10434 CVE-2018-14558 · GHSA-jh5j-w2c9-jcff

An issue was discovered on Tenda AC7 devices with firmware through V15.03.06.44_CN(AC7)…

CRITICAL 100KEV

An issue was discovered on Tenda AC7 devices with firmware through V15.03.06.44_CN(AC7), AC9 devices with firmware through V15.03.05.19(6318)_CN(AC9), and AC10 devices with firmware through V15.03.06.23_CN(AC10).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0851 Published 2018-10-30 No fix listed CWE-78

TI-2026-78650 CVE-2026-113744

Stack-based buffer overflow in Tenda AC19 web management service

HIGH 82

A security vulnerability has been detected in Tenda AC19 16.03.10.07.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00622 Published 2026-10-21 No fix listed CWE-119

TI-2026-66119 CVE-2026-104610 · GHSA-rw2m-x35c-9468

Tenda HG7/HG9/HG10 Boa Web Server formLoopBack boaGetVar stack-based overflow

HIGH 82

A security vulnerability has been detected in Tenda HG7, HG9 and HG10 300001138_en_xpon.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00644 Published 2026-10-02 No fix listed CWE-119

TI-2026-57025 CVE-2026-82695 · GHSA-q8vr-4mj7-wm6v

Tenda AC18 Telnet telnet missing authentication

HIGH 82

A security flaw has been discovered in Tenda AC18 15.03.05.19.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.01407 Published 2026-08-31 No fix listed CWE-287

TI-2026-57024 CVE-2026-82694 · GHSA-79rc-8x3p-4wjw

Tenda AC1206 Web UI ate R7WebsSecurityHandler missing authentication

HIGH 82

A vulnerability was identified in Tenda AC1206 15.03.06.23.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.01415 Published 2026-08-31 No fix listed CWE-287

TI-2026-57023 CVE-2026-82693 · GHSA-9225-239x-2hx8

Tenda AC1206 Web UI telnet TendaTelnet missing authentication

HIGH 82

A vulnerability was determined in Tenda AC1206 15.03.06.23.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.01415 Published 2026-08-31 No fix listed CWE-287

TI-2026-56899 CVE-2026-82542 · GHSA-rhpr-6c55-q8q3

Tenda HG10 Boa Web Server formIPv6Routing buffer overflow

HIGH 82

A weakness has been identified in Tenda HG10 300001138.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.01096 Published 2026-08-30 No fix listed CWE-119

TI-2026-37683 CVE-2026-51846 · GHSA-j57g-r926-cwvq

In Tenda AC7 v15.03.06.44, the wanSpeed parameter of the route /goform/AdvSetMacMtuWan…

HIGH 82

In Tenda AC7 v15.03.06.44, the wanSpeed parameter of the route /goform/AdvSetMacMtuWan has a stack buffer overflow vulnerability that can lead to remote arbitrary code execution.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00845 Published 2026-06-19 No fix listed CWE-121

TI-2026-37682 CVE-2026-51845 · GHSA-m32v-ppvw-wwc8

Tenda AC7 v15.03.06.44 contains a stack buffer overflow vulnerability in the…

HIGH 82

Tenda AC7 v15.03.06.44 contains a stack buffer overflow vulnerability in the /goform/AdvSetMacMtuWan interface via the mac parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00555 Published 2026-06-19 No fix listed CWE-121

TI-2026-37681 CVE-2026-51844 · GHSA-g533-f37w-h6w3

Tenda AC7 v15.03.06.44 contains a stack buffer overflow vulnerability in the…

HIGH 82

Tenda AC7 v15.03.06.44 contains a stack buffer overflow vulnerability in the /goform/AdvSetMacMtuWan interface via the cloneType parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00555 Published 2026-06-19 No fix listed CWE-121

TI-2026-37680 CVE-2026-51843 · GHSA-8wjp-x79j-qqmp

Tenda AC7 v15.03.06.44 contains a stack buffer overflow vulnerability in the…

HIGH 82

Tenda AC7 v15.03.06.44 contains a stack buffer overflow vulnerability in the /goform/AdvSetMacMtuWan interface via the wanMTU parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00555 Published 2026-06-19 No fix listed CWE-121

TI-2026-28218 CVE-2026-38835 · GHSA-656r-ggpg-wmqm

Tenda W30E V2.0 V16.01.0.21 was found to contain a command injection vulnerability in the…

HIGH 82

Tenda W30E V2.0 V16.01.0.21 was found to contain a command injection vulnerability in the formSetUSBPartitionUmount function via the usbPartitionName parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0215 Published 2026-04-21 No fix listed CWE-77

TI-2026-19433 CVE-2026-24113 · GHSA-ccfh-jpm3-xpg5