TE
Vendor
Tenda
2,202
CVEs
8
On KEV
9
New 30D
Products
AC9.8
AC9
Tenda
94 CVEs1 on KEV1 new
AC9.9
AC5
Tenda
41 CVEs0 on KEV1 new
HG10.0
HG10
Tenda
4 CVEs0 on KEV1 new
HG10.0
HG7
Tenda
4 CVEs0 on KEV1 new
HG10.0
HG9
Tenda
4 CVEs0 on KEV1 new
AC10.0
AC19
Tenda
1 CVEs0 on KEV1 new
BP9.9
BE3L Pro
Tenda
1 CVEs0 on KEV1 new
F64.3
F6
Tenda
2 CVEs0 on KEV2 new
AC9.8
AC10
Tenda
94 CVEs1 on KEV0 new
AC9.8
AC15
Tenda
86 CVEs1 on KEV0 new
AC9.8
AC7
Tenda
72 CVEs1 on KEV0 new
AF9.8
Ac11 Firmware
Tenda
9 CVEs1 on KEV0 new
AR9.8
AC11 Router
Tenda
1 CVEs1 on KEV0 new
AR9.8
AC1900 Router AC15 Model
Tenda
1 CVEs1 on KEV0 new
AA9.8
AC7, AC9, and AC10 Routers
Tenda
1 CVEs1 on KEV0 new
AC9.8
AC6
Tenda
109 CVEs0 on KEV0 new
AC10.0
AC18
Tenda
105 CVEs0 on KEV0 new
FH9.8
FH1202
Tenda
63 CVEs0 on KEV0 new
WF9.8
W30e Firmware
Tenda
63 CVEs0 on KEV0 new
AF9.8
Ac8 Firmware
Tenda
62 CVEs0 on KEV0 new
AF9.8
Ax1806 Firmware
Tenda
61 CVEs0 on KEV0 new
AF9.8
Ax1803 Firmware
Tenda
60 CVEs0 on KEV0 new
AF9.8
Ax3 Firmware
Tenda
53 CVEs0 on KEV0 new
AC10.0
AC1206
Tenda
48 CVEs0 on KEV0 new
M39.8
M3
Tenda
45 CVEs0 on KEV0 new
CH9.8
CH22
Tenda
44 CVEs0 on KEV0 new
FF9.8
Fh1206 Firmware
Tenda
39 CVEs0 on KEV0 new
FF9.8
Fh1203 Firmware
Tenda
35 CVEs0 on KEV0 new
FF9.8
F1203 Firmware
Tenda
34 CVEs0 on KEV0 new
AF9.8
Ax12 Firmware
Tenda
31 CVEs0 on KEV0 new
WF9.8
W15e Firmware
Tenda
31 CVEs0 on KEV0 new
W29.8
W20E
Tenda
31 CVEs0 on KEV0 new
F49.8
F453
Tenda
30 CVEs0 on KEV0 new
AF9.8
Ac21 Firmware
Tenda
29 CVEs0 on KEV0 new
FF9.8
Fh1205 Firmware
Tenda
29 CVEs0 on KEV0 new
F19.8
F1202
Tenda
28 CVEs0 on KEV0 new
FF9.8
Fh451 Firmware
Tenda
28 CVEs0 on KEV0 new
AF9.8
Ac23 Firmware
Tenda
27 CVEs0 on KEV0 new
F48.8
F456
Tenda
27 CVEs0 on KEV0 new
FH9.8
FH1201
Tenda
25 CVEs0 on KEV0 new
GF9.8
G3 Firmware
Tenda
24 CVEs0 on KEV0 new
F48.8
F456
Tenda
23 CVEs0 on KEV0 new
AF9.8
A15 Firmware
Tenda
22 CVEs0 on KEV0 new
F48.8
F451
Tenda
21 CVEs0 on KEV0 new
WF9.8
Wh450 Firmware
Tenda
21 CVEs0 on KEV0 new
AF9.8
Ac20 Firmware
Tenda
20 CVEs0 on KEV0 new
AF9.8
Ac10u Firmware
Tenda
19 CVEs0 on KEV0 new
IF9.8
I21 Firmware
Tenda
19 CVEs0 on KEV0 new
WF9.8
W9 Firmware
Tenda
19 CVEs0 on KEV0 new
IF9.8
I22 Firmware
Tenda
17 CVEs0 on KEV0 new
RF9.8
Rx3 Firmware
Tenda
17 CVEs0 on KEV0 new
AF9.8
Ac500 Firmware
Tenda
16 CVEs0 on KEV0 new
OF9.8
O3 Firmware
Tenda
16 CVEs0 on KEV0 new
WF9.8
W18e Firmware
Tenda
15 CVEs0 on KEV0 new
TF9.8
Tx3 Firmware
Tenda
14 CVEs0 on KEV0 new
CP10.0
CP3
Tenda
13 CVEs0 on KEV0 new
W19.8
W12
Tenda
13 CVEs0 on KEV0 new
4G9.8
4G300
Tenda
12 CVEs0 on KEV0 new
AF9.8
A18 Firmware
Tenda
11 CVEs0 on KEV0 new
AF9.8
Ax9 Firmware
Tenda
11 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-115797 New | F6 F6 Tenda | 3.7 | Oct 23 | Tenda F6 Web Management cleartext transmission |
| CVE-2026-115796 New | F6 F6 Tenda | 4.3 | Oct 23 | Tenda F6 Web Management cross-site request forgery |
| CVE-2026-114268 New | BP BE3L Pro Tenda | 9.9 | Oct 21 | Tenda BE3L Pro WifiBasicSet formWifiBasicSet buffer overflow |
| CVE-2026-113744 | AC AC19 Tenda | 10.0 | Oct 21 | Tenda AC19 httpd Web Management Service SetFirewallCfg formSetFirewallCfg stack-based overflow |
| CVE-2026-105778 | AC AC5 Tenda | 9.9 | Oct 6 | Tenda AC5 Wifi setWifi stack-based overflow |
| CVE-2026-104611 | AC AC9 Tenda | 9.1 | Oct 2 | Tenda AC9 POST Request fast_setting_internet_set stack-based overflow |
| CVE-2026-104610 | HG HG10 Tenda | 10.0 | Oct 2 | Tenda HG7/HG9/HG10 Boa Web Server formLoopBack boaGetVar stack-based overflow |
| CVE-2026-90689 | W2 W20E Tenda | 8.8 | Sep 14 | Tenda W20E formDelWebAuthWhiteUser stack-based overflow |
| CVE-2026-90688 | W2 W20E Tenda | 6.5 | Sep 14 | Tenda W20E HTTP formIPMacBindAdd stack-based overflow |
| CVE-2026-86300 | AC AC9 Tenda | 7.3 | Sep 7 | Tenda AC9 Web Management R7WebsSecurityHandler improper authentication |
| CVE-2026-86167 | HG HG10 Tenda | 9.9 | Sep 6 | Tenda HG10 Boa formgponConf os command injection |
| CVE-2026-86166 | HG HG10 Tenda | 8.8 | Sep 6 | Tenda HG10 Boa Web Server formWanRedirect buffer overflow |
| CVE-2026-86165 | HG HG10 Tenda | 9.8 | Sep 6 | Tenda HG10 formURL buffer overflow |
| CVE-2026-86153 | CP CP3 Tenda | 9.1 | Sep 6 | Tenda CP3 Redirect.cpp SetRedirectEnable privileges management |
| CVE-2026-86152 | CP CP3 Tenda | 10.0 | Sep 6 | Tenda CP3 Kylin AutoAddWifi.cpp ThreadProc os command injection |
| CVE-2026-86151 | CP CP3 Tenda | 9.1 | Sep 5 | Tenda CP3 Network Configuration Management system.c sub_2F77E8 os command injection |
| CVE-2026-86150 | CP CP3 Tenda | 4.1 | Sep 5 | Tenda CP3 hostapd hard-coded credentials |
| CVE-2026-86149 | CP CP3 Tenda | 9.1 | Sep 5 | Tenda CP3 NetCheckPing.cpp os command injection |
| CVE-2026-86148 | CP CP3 Tenda | 9.1 | Sep 5 | Tenda CP3 Kylin system.c SystemAsh os command injection |
| CVE-2026-85110 | HG HG10 Tenda | 8.8 | Sep 3 | Tenda HG10 Boa Web Server formWlanSetup buffer overflow |
| CVE-2026-85109 | HG HG10 Tenda | 9.8 | Sep 3 | Tenda HG10 Boa Web Server formLogin buffer overflow |
| CVE-2026-82695 | AC AC18 Tenda | 10.0 | Aug 31 | Tenda AC18 Telnet telnet missing authentication |
| CVE-2026-82694 | AC AC1206 Tenda | 10.0 | Aug 31 | Tenda AC1206 Web UI ate R7WebsSecurityHandler missing authentication |
| CVE-2026-82693 | AC AC1206 Tenda | 10.0 | Aug 31 | Tenda AC1206 Web UI telnet TendaTelnet missing authentication |
| CVE-2026-82542 | HG HG10 Tenda | 10.0 | Aug 30 | Tenda HG10 Boa Web Server formIPv6Routing buffer overflow |
| CVE-2026-78141 | CH CH22 Tenda | 7.4 | Aug 23 | Tenda CH22 exeCommand formexeCommand command injection |
| CVE-2026-78063 | CH CH22 Tenda | 7.4 | Aug 23 | Tenda CH22 editFileName formeditFileName command injection |
| CVE-2026-77031 | CH CH22 Tenda | 7.4 | Aug 20 | Tenda CH22 formcreateFileName command injection |
| CVE-2026-19924 | AC AC10 Tenda | 9.8 | Aug 16 | Tenda AC10 httpd R7WebsSecurityHandler improper authentication |
| CVE-2026-19824 | W2 W20E Tenda | 8.8 | Aug 14 | Tenda W20E addIpMacBind ipMacBindListStore stack-based overflow |
| CVE-2026-19823 | W2 W20E Tenda | 8.8 | Aug 14 | Tenda W20E QoS Rule Deletion delQos formQOSRuleDel stack-based overflow |
| CVE-2026-19822 | W2 W20E Tenda | 8.8 | Aug 14 | Tenda W20E QoS Edit editQos lstAdd stack-based overflow |
| CVE-2026-19821 | AC AC12 Tenda | 8.8 | Aug 14 | Tenda AC12 httpd web management interface SetSysAutoRebbotCfg formSetRebootTimer buffer overflow |
| CVE-2026-19792 | G0 G0 Tenda | 8.8 | Aug 14 | Tenda G0 httpd web management interface module setPortMapping buffer overflow |
| CVE-2026-19791 | G0 G0 Tenda | 8.8 | Aug 14 | Tenda G0 httpd web management interface module addStaticRoute stack-based overflow |
| CVE-2026-19790 | G0 G0 Tenda | 8.8 | Aug 14 | Tenda G0 httpd Web Management module formSetPortMirror stack-based overflow |
| CVE-2026-19789 | AC AC1206 Tenda | 8.8 | Aug 14 | Tenda AC1206 httpd web management interface WifiGuestSet set_wl_guest_iplist stack-based overflow |
| CVE-2026-19788 | AC AC1206 Tenda | 8.8 | Aug 14 | Tenda AC1206 httpd web management interface SetOnlineDevName set_device_name stack-based overflow |
| CVE-2026-19750 | TX TX3 Tenda | 8.1 | Aug 13 | Tenda CH/CP/TX3 SSH hard-coded password |
| CVE-2026-19749 | TC TC3T15C Tenda | 3.7 | Aug 13 | Tenda CH7 RTSP/ONVIF missing authentication |
| CVE-2026-19748 | CP CP3 Pro Tenda | 3.7 | Aug 13 | Tenda CH7 Kylin Web Service CWebSessionManager_ParseSession entropy |
| CVE-2026-19747 | CH CH7G Tenda | 9.8 | Aug 13 | Tenda CH7 ATE Module Kylin HandleCmd command injection |
| CVE-2026-19346 | CH CH22 Tenda | 8.8 | Aug 9 | Tenda CH22 CertListInfo formCertListInfo command injection |
| CVE-2026-16248 | AC AC10 Tenda | 8.8 | Jul 20 | Tenda AC10 httpd/netctrl AdvSetLanip fromAdvSetLanip stack-based overflow |
| CVE-2026-15696 | BP BE12 Pro Tenda | 8.8 | Jul 14 | Tenda BE12 Pro VirtualSer fromVirtualSer stack-based overflow |
| CVE-2026-15695 | BP BE12 Pro Tenda | 8.8 | Jul 14 | Tenda BE12 Pro DhcpListClient fromDhcpListClient stack-based overflow |
| CVE-2026-15694 | BP BE12 Pro Tenda | 8.8 | Jul 14 | Tenda BE12 Pro SetIpBind fromSetIpBind stack-based overflow |
| CVE-2026-15693 | BP BE12 Pro Tenda | 8.8 | Jul 14 | Tenda BE12 Pro SafeMacFilter fromSafeMacFilter stack-based overflow |
| CVE-2026-15692 | BP BE12 Pro Tenda | 8.8 | Jul 14 | Tenda BE12 Pro SafeUrlFilter fromSafeUrlFilter stack-based overflow |
| CVE-2026-15691 | BP BE12 Pro Tenda | 8.8 | Jul 14 | Tenda BE12 Pro SafeClientFilter fromSafeClientFilter stack-based overflow |
| CVE-2026-15543 | CH CH22 Tenda | 8.8 | Jul 13 | Tenda CH22 CertListInfo formCertListInfo buffer overflow |
| CVE-2026-11405 | FI firmware Tenda | 9.8 | Jul 6 | Hidden backdoor authentication mechanism in multiple versions of Tenda firmware allows admin access to web management interface |
| CVE-2026-13519 | JD JD12L Tenda | 8.8 | Jun 29 | Tenda JD12L NatStaticSetting fromNatStaticSetting stack-based overflow |
| CVE-2026-13518 | JD JD12L Tenda | 8.8 | Jun 29 | Tenda JD12L addressNat fromAddressNat stack-based overflow |
| CVE-2026-13517 | JD JD12L Tenda | 8.8 | Jun 29 | Tenda JD12L WifiBasicSet formWifiBasicSet stack-based overflow |
| CVE-2026-13516 | JD JD12L Tenda | 8.8 | Jun 28 | Tenda JD12L WifiGuestSet fromSetWifiGusetBasic stack-based overflow |
| CVE-2026-13515 | JD JD12L Tenda | 8.8 | Jun 28 | Tenda JD12L SetPptpServerCfg formSetPPTPServer stack-based overflow |
| CVE-2026-51846 | AF Ac7 Firmware Tenda | 9.8 | Jun 19 | In Tenda AC7 v15.03.06.44, the wanSpeed parameter of the route /goform/AdvSetMacMtuWan has a stack buffer overflow vulnerability that can lead to remote arbitrary code execution |
| CVE-2026-51845 | AF Ac7 Firmware Tenda | 9.8 | Jun 19 | Tenda AC7 v15.03.06.44 contains a stack buffer overflow vulnerability in the /goform/AdvSetMacMtuWan interface via the mac parameter |
| CVE-2026-51844 | AF Ac7 Firmware Tenda | 9.8 | Jun 19 | Tenda AC7 v15.03.06.44 contains a stack buffer overflow vulnerability in the /goform/AdvSetMacMtuWan interface via the cloneType parameter |
