ST
Vendor
Shenzhen Tenda Technology Co., Ltd.
20
CVEs
0
On KEV
0
New 30D
Products
WV9.8
W30E V2
Shenzhen Tenda Technology Co., Ltd.
11 CVEs0 on KEV0 new
TA6.5
Tenda AC7
Shenzhen Tenda Technology Co., Ltd.
4 CVEs0 on KEV0 new
TF6.5
Tenda F3
Shenzhen Tenda Technology Co., Ltd.
4 CVEs0 on KEV0 new
TD7.5
Tenda D151 & D301
Shenzhen Tenda Technology Co.,Ltd.
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-27514 | TF Tenda F3 Shenzhen Tenda Technology Co., Ltd. | 6.5 | Feb 23 | Tenda F3 Plaintext Credential Exposure in Configuration Download |
| CVE-2026-27513 | TF Tenda F3 Shenzhen Tenda Technology Co., Ltd. | 4.3 | Feb 23 | Tenda F3 CSRF in Web Management Interface |
| CVE-2026-27512 | TF Tenda F3 Shenzhen Tenda Technology Co., Ltd. | 6.1 | Feb 23 | Tenda F3 Reflected Script Execution via Missing nosniff Header |
| CVE-2026-27511 | TF Tenda F3 Shenzhen Tenda Technology Co., Ltd. | 4.3 | Feb 23 | Tenda F3 Clickjacking in Web Management Interface |
| CVE-2026-24441 | TA Tenda AC7 Shenzhen Tenda Technology Co., Ltd. | 5.9 | Feb 3 | Tenda AC7 Transmits Admin Credentials Without HTTPS Protection |
| CVE-2026-24434 | TA Tenda AC7 Shenzhen Tenda Technology Co., Ltd. | 6.5 | Feb 3 | Tenda AC7 Web Interface Lacks CSRF Protections for Admin Actions |
| CVE-2026-24427 | TA Tenda AC7 Shenzhen Tenda Technology Co., Ltd. | 5.5 | Feb 3 | Tenda AC7 Exposes Admin Credentials in Configuration Responses |
| CVE-2026-24426 | TA Tenda AC7 Shenzhen Tenda Technology Co., Ltd. | 6.1 | Feb 3 | Tenda AC7 Reflected XSS via Web Interface Output Encoding |
| CVE-2026-24435 | WV W30E V2 Shenzhen Tenda Technology Co., Ltd. | 6.5 | Jan 26 | Tenda W30E V2 Permissive CORS Allows Cross-origin Data Access |
| CVE-2026-24439 | WV W30E V2 Shenzhen Tenda Technology Co., Ltd. | 6.5 | Jan 26 | Tenda W30E V2 Lacks X-Content-Type-Options Header |
| CVE-2026-24432 | WV W30E V2 Shenzhen Tenda Technology Co., Ltd. | 4.3 | Jan 26 | Tenda W30E V2 Missing CSRF Protections for Administrative Actions |
| CVE-2026-24433 | WV W30E V2 Shenzhen Tenda Technology Co., Ltd. | 5.4 | Jan 26 | Tenda W30E V2 Stored XSS via Username Field |
| CVE-2026-24431 | WV W30E V2 Shenzhen Tenda Technology Co., Ltd. | 6.5 | Jan 26 | Tenda W30E V2 Web UI Reveals Passwords in Cleartext |
| CVE-2026-24437 | WV W30E V2 Shenzhen Tenda Technology Co., Ltd. | 5.5 | Jan 26 | Tenda W30E V2 Missing Cache Controls for Credential-bearing Pages |
| CVE-2026-24436 | WV W30E V2 Shenzhen Tenda Technology Co., Ltd. | 9.8 | Jan 26 | Tenda W30E V2 Lacks Rate Limiting on Authentication |
| CVE-2026-24428 | WV W30E V2 Shenzhen Tenda Technology Co., Ltd. | 8.8 | Jan 26 | Tenda W30E V2 Incorrect Authorization Allows Administrator Password Change |
| CVE-2026-24430 | WV W30E V2 Shenzhen Tenda Technology Co., Ltd. | 7.5 | Jan 26 | Tenda W30E V2 HTTP Responses Expose Plaintext Credentials |
| CVE-2026-24429 | WV W30E V2 Shenzhen Tenda Technology Co., Ltd. | 9.8 | Jan 26 | Tenda W30E V2 Hardcoded Default Password for Built-in Account |
| CVE-2026-24440 | WV W30E V2 Shenzhen Tenda Technology Co., Ltd. | 8.8 | Jan 26 | Tenda W30E V2 Allows Password Changes Without Verifying Current Password |
| CVE-2021-47802 | TD Tenda D151 & D301 Shenzhen Tenda Technology Co.,Ltd. | 7.5 | Jan 21 | Tenda D151 & D301 - Configuration Download |