Vulnerabilities

TI-2026-86593 CVE-2026-123966 · GHSA-w69v-2wp6-xxjp

Heap-based buffer overflow in Tenda AC19 parent control function

MEDIUM 45

A vulnerability was determined in Tenda AC19 16.03.10.07.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.01021 Published 2026-11-07 No fix listed CWE-119

TI-2026-83171 CVE-2026-118238 · GHSA-26w6-cmwv-h7mc

OS command injection in Tenda W18E packet capture feature

LOW 37

The Tenda W18E web management server is vulnerable to OS command injection via the "diagnose" packet-capture feature due to improper validation of JSON fields.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01535 Published 2026-10-30 No fix listed CWE-78

TI-2026-79976 CVE-2026-115797 · GHSA-prx2-chrc-4rxp

Cleartext transmission in Tenda F6 web management interface

MEDIUM 61

A weakness has been identified in Tenda F6 12.02.01.73.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00202 Published 2026-10-23 No fix listed CWE-310

TI-2026-79975 CVE-2026-115796 · GHSA-vqrc-78w8-pwp2

Cross-site request forgery in Tenda F6 web management interface

MEDIUM 57

A security flaw has been discovered in Tenda F6 12.02.01.73.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00159 Published 2026-10-23 No fix listed CWE-352

TI-2026-78959 CVE-2026-114268 · GHSA-rmxj-gq8p-q2jf

Tenda BE3L Pro formWifiBasicSet buffer overflow

HIGH 76

A flaw has been found in Tenda BE3L Pro 16.03.60.62.

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.00511 Published 2026-10-21 No fix listed CWE-119

TI-2026-78650 CVE-2026-113744

Stack-based buffer overflow in Tenda AC19 web management service

HIGH 82

A security vulnerability has been detected in Tenda AC19 16.03.10.07.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00622 Published 2026-10-21 No fix listed CWE-119

TI-2026-68382 CVE-2026-105778 · GHSA-pmv4-xrcq-cmxf

Stack-based buffer overflow in Tenda AC5 Wifi setWifi handler

HIGH 76

A vulnerability has been found in Tenda AC5 02.03.01.111_multi.

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.00476 Published 2026-10-06 No fix listed CWE-119

TI-2026-66120 CVE-2026-104611 · GHSA-5xvg-86hf-5h5q

Tenda AC9 POST Request fast_setting_internet_set stack-based overflow

MEDIUM 43

A vulnerability was detected in Tenda AC9 15.03.02.13.

CVSS 4.0CRITICAL 9.4 Network High privileges No interaction EPSS 0.00493 Published 2026-10-02 No fix listed CWE-119

TI-2026-66119 CVE-2026-104610 · GHSA-rw2m-x35c-9468

Tenda HG7/HG9/HG10 Boa Web Server formLoopBack boaGetVar stack-based overflow

HIGH 82

A security vulnerability has been detected in Tenda HG7, HG9 and HG10 300001138_en_xpon.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00644 Published 2026-10-02 No fix listed CWE-119

TI-2026-61646 CVE-2026-90689 · GHSA-crxm-72cq-869m

Tenda W20E formDelWebAuthWhiteUser stack-based overflow

MEDIUM 41

A security flaw has been discovered in Tenda W20E 15.11.0.61068_1546_841_CN_TDC.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00854 Published 2026-09-14 No fix listed CWE-119

TI-2026-61645 CVE-2026-90688 · GHSA-xqq3-p9cq-5c28

Tenda W20E HTTP formIPMacBindAdd stack-based overflow

MEDIUM 64

A vulnerability was identified in Tenda W20E 15.11.0.61068_1546_841_CN_TDC.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00708 Published 2026-09-14 No fix listed CWE-119

TI-2026-59084 CVE-2026-86300 · GHSA-j3cm-vx4c-h779

Tenda AC9 Web Management R7WebsSecurityHandler improper authentication

HIGH 70

A flaw has been found in Tenda AC9 15.03.05.14.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00843 Published 2026-09-07 No fix listed CWE-287

TI-2026-58956 CVE-2026-86167 · GHSA-w592-pr34-frcq

Tenda HG10 Boa formgponConf os command injection

HIGH 76

A vulnerability was identified in Tenda HG10 300001138.

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.0273 Published 2026-09-06 No fix listed CWE-77

TI-2026-58955 CVE-2026-86166 · GHSA-q93p-5wpr-g629

Tenda HG10 Boa Web Server formWanRedirect buffer overflow

HIGH 73

A vulnerability was determined in Tenda HG10 300001138.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00854 Published 2026-09-06 No fix listed CWE-119

TI-2026-58954 CVE-2026-86165 · GHSA-rpvc-23w4-j8mm

Tenda HG10 formURL buffer overflow

HIGH 81

A vulnerability was found in Tenda HG10 300001138.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.01132 Published 2026-09-06 No fix listed CWE-119

TI-2026-58945 CVE-2026-86153 · GHSA-3557-5v9r-p922

Tenda CP3 Redirect.cpp SetRedirectEnable privileges management

MEDIUM 44

A vulnerability has been found in Tenda CP3 27.5.57.101.

CVSS 4.0CRITICAL 9.4 Network High privileges No interaction EPSS 0.00715 Published 2026-09-06 No fix listed CWE-266

TI-2026-58944 CVE-2026-86152 · GHSA-xmhh-vj2g-rx9g

Tenda CP3 Kylin AutoAddWifi.cpp ThreadProc os command injection

MEDIUM 54

A flaw has been found in Tenda CP3 27.5.57.101.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.02882 Published 2026-09-06 No fix listed CWE-77

TI-2026-58943 CVE-2026-86151 · GHSA-6358-p8m7-jxv6

Tenda CP3 Network Configuration Management system.c sub_2F77E8 os command injection

HIGH 76

A vulnerability was detected in Tenda CP3 27.5.57.101.

CVSS 4.0CRITICAL 9.4 Network High privileges No interaction EPSS 0.02945 Published 2026-09-05 No fix listed CWE-77

TI-2026-58942 CVE-2026-86150 · GHSA-3hwr-w7cv-hwc6

Tenda CP3 hostapd hard-coded credentials

LOW 23

A security vulnerability has been detected in Tenda CP3 27.5.57.101.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00377 Published 2026-09-05 No fix listed CWE-259

TI-2026-58941 CVE-2026-86149 · GHSA-qh73-x3c2-xph4

Tenda CP3 NetCheckPing.cpp os command injection

MEDIUM 48

A weakness has been identified in Tenda CP3 27.5.57.101.

CVSS 4.0CRITICAL 9.4 Network High privileges No interaction EPSS 0.02945 Published 2026-09-05 No fix listed CWE-77

TI-2026-58940 CVE-2026-86148 · GHSA-38rg-j8xg-2m77

Tenda CP3 Kylin system.c SystemAsh os command injection

MEDIUM 48

A security flaw has been discovered in Tenda CP3 27.5.57.101.

CVSS 4.0CRITICAL 9.4 Network High privileges No interaction EPSS 0.02945 Published 2026-09-05 No fix listed CWE-77

TI-2026-58462 CVE-2026-85110 · GHSA-f4xv-q254-wwpm

Tenda HG10 Boa Web Server formWlanSetup buffer overflow

HIGH 73

A vulnerability was identified in Tenda HG10 300001138.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00854 Published 2026-09-03 No fix listed CWE-119

TI-2026-58461 CVE-2026-85109 · GHSA-w4wj-hq79-xrch

Tenda HG10 Boa Web Server formLogin buffer overflow

HIGH 81

A vulnerability was determined in Tenda HG10 300001138.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.01096 Published 2026-09-03 No fix listed CWE-119

TI-2026-57025 CVE-2026-82695 · GHSA-q8vr-4mj7-wm6v

Tenda AC18 Telnet telnet missing authentication

HIGH 82

A security flaw has been discovered in Tenda AC18 15.03.05.19.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.01407 Published 2026-08-31 No fix listed CWE-287

TI-2026-57024 CVE-2026-82694 · GHSA-79rc-8x3p-4wjw

Tenda AC1206 Web UI ate R7WebsSecurityHandler missing authentication

HIGH 82

A vulnerability was identified in Tenda AC1206 15.03.06.23.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.01415 Published 2026-08-31 No fix listed CWE-287

Vulnerabilities

Filters