Vulnerabilities

TI-2026-19435 CVE-2026-24115 · GHSA-x7rc-7ghv-7gv5

An issue was discovered in Tenda W20E V4.0br_V15.11.0.6.

MEDIUM 50

An issue was discovered in Tenda W20E V4.0br_V15.11.0.6.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00766 Published 2026-03-02 No fix listed CWE-120

TI-2026-19434 CVE-2026-24114 · GHSA-46mw-j26v-v5xp

An issue was discovered in Tenda W20E V4.0br_V15.11.0.6.

HIGH 81

An issue was discovered in Tenda W20E V4.0br_V15.11.0.6.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00694 Published 2026-03-02 No fix listed CWE-120

TI-2026-19433 CVE-2026-24113 · GHSA-ccfh-jpm3-xpg5

An issue was discovered in Tenda W20E V4.0br_V15.11.0.6.

HIGH 82

An issue was discovered in Tenda W20E V4.0br_V15.11.0.6.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00738 Published 2026-03-02 No fix listed CWE-120

TI-2026-19432 CVE-2026-24112 · GHSA-vq72-fxfg-gw8p

An issue was discovered in Tenda W20E V4.0br_V15.11.0.6.

HIGH 81

An issue was discovered in Tenda W20E V4.0br_V15.11.0.6.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00597 Published 2026-03-02 No fix listed CWE-120

TI-2026-19431 CVE-2026-24111 · GHSA-h4gj-g96p-mj65

An issue was discovered in Tenda W20E V4.0br_V15.11.0.6.

HIGH 82

An issue was discovered in Tenda W20E V4.0br_V15.11.0.6.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00738 Published 2026-03-02 No fix listed CWE-120

TI-2026-19430 CVE-2026-24110 · GHSA-jhhp-rvwq-h7p2

An issue was discovered in Tenda W20E V4.0br_V15.11.0.6.

HIGH 82

An issue was discovered in Tenda W20E V4.0br_V15.11.0.6.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00484 Published 2026-03-02 No fix listed CWE-120

TI-2026-19429 CVE-2026-24109 · GHSA-97j3-p539-j6m6

An issue was discovered in Tenda W20E V4.0br_V15.11.0.6.

HIGH 82

An issue was discovered in Tenda W20E V4.0br_V15.11.0.6.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00738 Published 2026-03-02 No fix listed CWE-120

TI-2026-19428 CVE-2026-24108 · GHSA-84m3-vwgv-cp2x

An issue was discovered in Tenda W20E V4.0br_V15.11.0.6.

MEDIUM 50

An issue was discovered in Tenda W20E V4.0br_V15.11.0.6.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00738 Published 2026-03-02 No fix listed CWE-120

TI-2026-19427 CVE-2026-24107 · GHSA-9gp2-wwx4-f276

An issue was discovered in Tenda W20E V4.0br_V15.11.0.6.

HIGH 82

An issue was discovered in Tenda W20E V4.0br_V15.11.0.6.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02457 Published 2026-03-02 No fix listed CWE-94

TI-2025-28672 CVE-2025-44867 · GHSA-47r6-rvxr-w4cc

Tenda W20E V15.11.0.6 was found to contain a command injection vulnerability in the…

MEDIUM 63

Tenda W20E V15.11.0.6 was found to contain a command injection vulnerability in the formSetNetCheckTools function via the hostName parameter.

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.0118 Published 2025-05-01 No fix listed CWE-77

TI-2025-28671 CVE-2025-44866 · GHSA-235m-7f4x-p4m8

Tenda W20E V15.11.0.6 was found to contain a command injection vulnerability in the…

MEDIUM 63

Tenda W20E V15.11.0.6 was found to contain a command injection vulnerability in the formSetDebugCfg function via the level parameter.

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.0117 Published 2025-05-01 No fix listed CWE-77

TI-2025-28670 CVE-2025-44865 · GHSA-6337-gf92-4pxh

Tenda W20E V15.11.0.6 was found to contain a command injection vulnerability in the…

MEDIUM 63

Tenda W20E V15.11.0.6 was found to contain a command injection vulnerability in the formSetDebugCfg function via the enable parameter.

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.0117 Published 2025-05-01 No fix listed CWE-77

TI-2025-28669 CVE-2025-44864 · GHSA-hrj3-q54c-3v45

Tenda W20E V15.11.0.6 was found to contain a command injection vulnerability in the…

MEDIUM 63

Tenda W20E V15.11.0.6 was found to contain a command injection vulnerability in the formSetDebugCfg function via the module parameter.

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.0117 Published 2025-05-01 No fix listed CWE-77

TI-2024-03614 CVE-2024-3874 · GHSA-746x-qpfv-r44f

Tenda W20E SetRemoteWebManage formSetRemoteWebManage stack-based overflow

MEDIUM 43

A vulnerability was found in Tenda W20E 15.11.0.6.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01305 Published 2024-04-16 No fix listed CWE-121

TI-2023-11784 CVE-2023-26806 · GHSA-59mg-mjvx-hwq3

Tenda W20E v15.11.0.6(US_W20EV4.0br_v15.11.0.6(1068_1546_841 is vulnerable to Buffer…

HIGH 75

Tenda W20E v15.11.0.6(US_W20EV4.0br_v15.11.0.6(1068_1546_841 is vulnerable to Buffer Overflow via function formSetSysTime,

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00928 Published 2023-03-19 No fix listed CWE-787

TI-2023-11783 CVE-2023-26805 · GHSA-43hv-qjpp-xgv7

Tenda W20E v15.11.0.6 (US_W20EV4.0br_v15.11.0.6(1068_1546_841)_CN_TDC) is vulnerable to…

HIGH 75

Tenda W20E v15.11.0.6 (US_W20EV4.0br_v15.11.0.6(1068_1546_841)_CN_TDC) is vulnerable to Buffer Overflow via function formIPMacBindModify.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00928 Published 2023-03-19 No fix listed CWE-787

TI-2022-23824 CVE-2022-48130 · GHSA-w39x-3w6h-2g33

Tenda W20E v15.11.0.6 was discovered to contain multiple stack overflows in the function…

HIGH 82

Tenda W20E v15.11.0.6 was discovered to contain multiple stack overflows in the function formSetStaticRoute via the parameters staticRouteNet, staticRouteMask, staticRouteGateway, staticRouteWAN.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00928 Published 2023-02-02 No fix listed CWE-787

TI-2022-22741 CVE-2022-45997 · GHSA-hvf8-35gm-22pj

Tenda W20E V16.01.0.6(3392) is vulnerable to Buffer Overflow.

LOW 35

Tenda W20E V16.01.0.6(3392) is vulnerable to Buffer Overflow.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0094 Published 2022-12-12 No fix listed CWE-120

TI-2022-22740 CVE-2022-45996 · GHSA-gfwq-rc4c-9m52

Tenda W20E V16.01.0.6(3392) is vulnerable to Command injection via cmd_get_ping_output.

LOW 38

Tenda W20E V16.01.0.6(3392) is vulnerable to Command injection via cmd_get_ping_output.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02297 Published 2022-12-12 No fix listed CWE-78

TI-2022-19443 CVE-2022-40855 · GHSA-526f-868j-w52f

Tenda W20E router V15.11.0.6 contains a stack overflow in the function formSetPortMapping…

HIGH 82

Tenda W20E router V15.11.0.6 contains a stack overflow in the function formSetPortMapping with post request 'goform/setPortMapping/'.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.14074 Published 2022-09-23 No fix listed CWE-787

TI-2022-19449 CVE-2022-40866 · GHSA-986h-37wj-r876

Tenda W20E router V15.11.0.6 (US_W20EV4.0br_V15.11.0.6(1068_1546_841)_CN_TDC) contains a…

HIGH 82

Tenda W20E router V15.11.0.6 (US_W20EV4.0br_V15.11.0.6(1068_1546_841)_CN_TDC) contains a stack overflow vulnerability in the function formSetDebugCfg with request /goform/setDebugCfg/

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01174 Published 2022-09-23 No fix listed CWE-787

TI-2022-19450 CVE-2022-40867 · GHSA-hhrc-f68j-f28p

Tenda W20E router V15.11.0.6 (US_W20EV4.0br_V15.11.0.6(1068_1546_841)_CN_TDC) contains a…

HIGH 82

Tenda W20E router V15.11.0.6 (US_W20EV4.0br_V15.11.0.6(1068_1546_841)_CN_TDC) contains a stack overflow vulnerability in the function formIPMacBindDel with the request /goform/delIpMacBind/

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01174 Published 2022-09-23 No fix listed CWE-787

TI-2022-19451 CVE-2022-40868 · GHSA-4rrx-m76x-mwvv

Tenda W20E router V15.11.0.6 (US_W20EV4.0br_V15.11.0.6(1068_1546_841)_CN_TDC) contains a…

HIGH 82

Tenda W20E router V15.11.0.6 (US_W20EV4.0br_V15.11.0.6(1068_1546_841)_CN_TDC) contains a stack overflow vulnerability in the function formDelDhcpRule with the request /goform/delDhcpRules/

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01174 Published 2022-09-23 No fix listed CWE-787

Vulnerabilities

Filters