# cve.now: Shenzhen Tenda Technology Co., Ltd.

The newest entries naming Shenzhen Tenda Technology Co., Ltd. as an affected vendor (up to 200), of 25 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-27514](https://cve.now/CVE-2026-27514.md): Tenda F3 Plaintext Credential Exposure in Configuration Download (CVSS 7.1)
- [CVE-2026-27513](https://cve.now/CVE-2026-27513.md): Tenda F3 CSRF in Web Management Interface (CVSS 5.1)
- [CVE-2026-27512](https://cve.now/CVE-2026-27512.md): Tenda F3 Reflected Script Execution via Missing nosniff Header (CVSS 5.1)
- [CVE-2026-27511](https://cve.now/CVE-2026-27511.md): Tenda F3 Clickjacking in Web Management Interface (CVSS 5.1)
- [CVE-2026-25857](https://cve.now/CVE-2026-25857.md): Tenda G300-F Command Injection via formSetWanDiag (CVSS 8.6)
- [CVE-2026-24441](https://cve.now/CVE-2026-24441.md): Tenda AC7 Transmits Admin Credentials Without HTTPS Protection (CVSS 8.2)
- [CVE-2026-24434](https://cve.now/CVE-2026-24434.md): Tenda AC7 Web Interface Lacks CSRF Protections for Admin Actions (CVSS 5.1)
- [CVE-2026-24427](https://cve.now/CVE-2026-24427.md): Tenda AC7 Exposes Admin Credentials in Configuration Responses (CVSS 6.8)
- [CVE-2026-24426](https://cve.now/CVE-2026-24426.md): Tenda AC7 Reflected XSS via Web Interface Output Encoding (CVSS 5.1)
- [CVE-2026-24435](https://cve.now/CVE-2026-24435.md): Tenda W30E V2 Permissive CORS Allows Cross-origin Data Access (CVSS 7.1)
- [CVE-2026-24439](https://cve.now/CVE-2026-24439.md): Tenda W30E V2 Lacks X-Content-Type-Options Header (CVSS 2.1)
- [CVE-2026-24432](https://cve.now/CVE-2026-24432.md): Tenda W30E V2 Missing CSRF Protections for Administrative Actions (CVSS 5.1)
- [CVE-2026-24433](https://cve.now/CVE-2026-24433.md): Tenda W30E V2 Stored XSS via Username Field (CVSS 5.1)
- [CVE-2026-24431](https://cve.now/CVE-2026-24431.md): Tenda W30E V2 Web UI Reveals Passwords in Cleartext (CVSS 7.1)
- [CVE-2026-24437](https://cve.now/CVE-2026-24437.md): Tenda W30E V2 Missing Cache Controls for Credential-bearing Pages (CVSS 4.8)
- [CVE-2026-24436](https://cve.now/CVE-2026-24436.md): Tenda W30E V2 Lacks Rate Limiting on Authentication (CVSS 9.2)
- [CVE-2026-24428](https://cve.now/CVE-2026-24428.md): Tenda W30E V2 Incorrect Authorization Allows Administrator Password Change (CVSS 8.7)
- [CVE-2026-24430](https://cve.now/CVE-2026-24430.md): Tenda W30E V2 HTTP Responses Expose Plaintext Credentials (CVSS 8.2)
- [CVE-2026-24429](https://cve.now/CVE-2026-24429.md): Tenda W30E V2 Hardcoded Default Password for Built-in Account (CVSS 9.3)
- [CVE-2026-24440](https://cve.now/CVE-2026-24440.md): Tenda W30E V2 Allows Password Changes Without Verifying Current Password (CVSS 8.7)
- [CVE-2021-47802](https://cve.now/CVE-2021-47802.md): Tenda D151 & D301 - Configuration Download (CVSS 8.7)
- [CVE-2024-52275](https://cve.now/CVE-2024-52275.md): Denial of Service on Tenda AC6V2 Due To Stack Overflow (CVSS 8.3)
- [CVE-2024-52274](https://cve.now/CVE-2024-52274.md): Denial of Service on Tenda AC6V2 Due To Stack Overflow (CVSS 8.3)
- [CVE-2024-52273](https://cve.now/CVE-2024-52273.md): Denial of Service on Tenda AC6V2 Due To Stack Overflow (CVSS 8.3)
- [CVE-2024-52272](https://cve.now/CVE-2024-52272.md): Denial of Service on Tenda AC6V2 Due To Stack Overflow (CVSS 8.3)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/shenzhen-tenda-technology
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.