Shenzhen Tenda Technology Co., Ltd. vulnerabilities
25 CVEs and advisories name Shenzhen Tenda Technology Co., Ltd. as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-27514Tenda F3 Plaintext Credential Exposure in Configuration Download
- CVE-2026-27513Tenda F3 CSRF in Web Management Interface
- CVE-2026-27512Tenda F3 Reflected Script Execution via Missing nosniff Header
- CVE-2026-27511Tenda F3 Clickjacking in Web Management Interface
- CVE-2026-25857Tenda G300-F Command Injection via formSetWanDiag
- CVE-2026-24441Tenda AC7 Transmits Admin Credentials Without HTTPS Protection
- CVE-2026-24434Tenda AC7 Web Interface Lacks CSRF Protections for Admin Actions
- CVE-2026-24427Tenda AC7 Exposes Admin Credentials in Configuration Responses
- CVE-2026-24426Tenda AC7 Reflected XSS via Web Interface Output Encoding
- CVE-2026-24435Tenda W30E V2 Permissive CORS Allows Cross-origin Data Access
- CVE-2026-24439Tenda W30E V2 Lacks X-Content-Type-Options Header
- CVE-2026-24432Tenda W30E V2 Missing CSRF Protections for Administrative Actions
- CVE-2026-24433Tenda W30E V2 Stored XSS via Username Field
- CVE-2026-24431Tenda W30E V2 Web UI Reveals Passwords in Cleartext
- CVE-2026-24437Tenda W30E V2 Missing Cache Controls for Credential-bearing Pages
- CVE-2026-24436Tenda W30E V2 Lacks Rate Limiting on Authentication
- CVE-2026-24428Tenda W30E V2 Incorrect Authorization Allows Administrator Password Change
- CVE-2026-24430Tenda W30E V2 HTTP Responses Expose Plaintext Credentials
- CVE-2026-24429Tenda W30E V2 Hardcoded Default Password for Built-in Account
- CVE-2026-24440Tenda W30E V2 Allows Password Changes Without Verifying Current Password
- CVE-2021-47802Tenda D151 & D301 - Configuration Download
- CVE-2024-52275Denial of Service on Tenda AC6V2 Due To Stack Overflow
- CVE-2024-52274Denial of Service on Tenda AC6V2 Due To Stack Overflow
- CVE-2024-52273Denial of Service on Tenda AC6V2 Due To Stack Overflow
- CVE-2024-52272Denial of Service on Tenda AC6V2 Due To Stack Overflow