Login Request a demo
FF
Product
F3 Firmware
by Tenda · last CVE Feb 23, 2026
10
CVEs
0
On KEV
6.5
Max CVSS
0
New 30D
Vulnerabilities10In the news0Timeline
Severity mix
Critical 0High 0Medium 10Low 0
Severity
All severities10Critical0High0Medium10Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add F3 Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-27514
6.5
0%
Feb 23
Tenda F3 Plaintext Credential Exposure in Configuration Download
Affected: through 12.01.01.55_multi
CVE-2020-35391
6.5
35%
Jan 1
Tenda N300 F3 12.01.01.48 devices allow remote attackers to obtain sensitive information (possibly including an http_passwd line) via a direct request for…
Affected: 12.01.01.48
CVE-2026-27512
6.1
0%
Feb 23
Tenda F3 Reflected Script Execution via Missing nosniff Header
Affected: through 12.01.01.55_multi
CVE-2025-57571
5.6
0%
Sep 10
Tenda F3 V12.01.01.48_multi and after is vulnerable to Buffer Overflow
Affected: 12.01.01.48
CVE-2025-57572
5.6
0%
Sep 10
Tenda F3 V12.01.01.48_multi and after is vulnerable to Buffer Overflow via the onlineList parameter in goform/setParentControl
Affected: 12.01.01.48
CVE-2025-57573
5.6
0%
Sep 10
Tenda F3 V12.01.01.48_multi and after is vulnerable to Buffer Overflow via the wifiTimeClose parameter in goform/setWifi
Affected: 12.01.01.48
CVE-2025-57570
5.6
0%
Sep 10
Tenda F3 V12.01.01.48_multi and after is vulnerable to Buffer Overflow via the QosList parameter in goform/setQoS
Affected: 12.01.01.48
CVE-2025-57569
5.6
0%
Sep 10
Tenda F3 V12.01.01.48_multi and after is vulnerable to Buffer Overflow via the portList parameter in /goform/setNAT
Affected: 12.01.01.48
CVE-2026-27513
4.3
0%
Feb 23
Tenda F3 CSRF in Web Management Interface
Affected: through 12.01.01.55_multi
CVE-2026-27511
4.3
0%
Feb 23
Tenda F3 Clickjacking in Web Management Interface
Affected: through 12.01.01.55_multi
Showing 10