# cve.now: Tenda

The newest entries naming Tenda as an affected vendor (up to 200), of 816 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-123966](https://cve.now/CVE-2026-123966.md): Tenda AC19 saveParentControlInfo heap-based overflow (CVSS 10.0)
- [CVE-2026-118238](https://cve.now/CVE-2026-118238.md): CVE-2026-118238 (CVSS 7.2)
- [CVE-2026-115797](https://cve.now/CVE-2026-115797.md): Tenda F6 Web Management cleartext transmission (CVSS 6.3)
- [CVE-2026-115796](https://cve.now/CVE-2026-115796.md): Tenda F6 Web Management cross-site request forgery (CVSS 5.3)
- [CVE-2026-114268](https://cve.now/CVE-2026-114268.md): Tenda BE3L Pro WifiBasicSet formWifiBasicSet buffer overflow (CVSS 9.4)
- [CVE-2026-113744](https://cve.now/CVE-2026-113744.md): Tenda AC19 httpd Web Management Service SetFirewallCfg formSetFirewallCfg stack-based overflow (CVSS 10.0)
- [CVE-2026-105778](https://cve.now/CVE-2026-105778.md): Tenda AC5 Wifi setWifi stack-based overflow (CVSS 9.4)
- [CVE-2026-104611](https://cve.now/CVE-2026-104611.md): Tenda AC9 POST Request fast\_setting\_internet\_set stack-based overflow (CVSS 9.4)
- [CVE-2026-104610](https://cve.now/CVE-2026-104610.md): Tenda HG7/HG9/HG10 Boa Web Server formLoopBack boaGetVar stack-based overflow (CVSS 10.0)
- [CVE-2026-90689](https://cve.now/CVE-2026-90689.md): Tenda W20E formDelWebAuthWhiteUser stack-based overflow (CVSS 8.7)
- [CVE-2026-90688](https://cve.now/CVE-2026-90688.md): Tenda W20E HTTP formIPMacBindAdd stack-based overflow (CVSS 7.1)
- [CVE-2026-86300](https://cve.now/CVE-2026-86300.md): Tenda AC9 Web Management R7WebsSecurityHandler improper authentication (CVSS 6.9)
- [CVE-2026-86167](https://cve.now/CVE-2026-86167.md): Tenda HG10 Boa formgponConf os command injection (CVSS 9.4)
- [CVE-2026-86166](https://cve.now/CVE-2026-86166.md): Tenda HG10 Boa Web Server formWanRedirect buffer overflow (CVSS 8.7)
- [CVE-2026-86165](https://cve.now/CVE-2026-86165.md): Tenda HG10 formURL buffer overflow (CVSS 9.3)
- [CVE-2026-86153](https://cve.now/CVE-2026-86153.md): Tenda CP3 Redirect.cpp SetRedirectEnable privileges management (CVSS 9.4)
- [CVE-2026-86152](https://cve.now/CVE-2026-86152.md): Tenda CP3 Kylin AutoAddWifi.cpp ThreadProc os command injection (CVSS 10.0)
- [CVE-2026-86151](https://cve.now/CVE-2026-86151.md): Tenda CP3 Network Configuration Management system.c sub\_2F77E8 os command injection (CVSS 9.4)
- [CVE-2026-86150](https://cve.now/CVE-2026-86150.md): Tenda CP3 hostapd hard-coded credentials (CVSS 5.1)
- [CVE-2026-86149](https://cve.now/CVE-2026-86149.md): Tenda CP3 NetCheckPing.cpp os command injection (CVSS 9.4)
- [CVE-2026-86148](https://cve.now/CVE-2026-86148.md): Tenda CP3 Kylin system.c SystemAsh os command injection (CVSS 9.4)
- [CVE-2026-85110](https://cve.now/CVE-2026-85110.md): Tenda HG10 Boa Web Server formWlanSetup buffer overflow (CVSS 8.7)
- [CVE-2026-85109](https://cve.now/CVE-2026-85109.md): Tenda HG10 Boa Web Server formLogin buffer overflow (CVSS 9.3)
- [CVE-2026-82695](https://cve.now/CVE-2026-82695.md): Tenda AC18 Telnet telnet missing authentication (CVSS 10.0)
- [CVE-2026-82694](https://cve.now/CVE-2026-82694.md): Tenda AC1206 Web UI ate R7WebsSecurityHandler missing authentication (CVSS 10.0)
- [CVE-2026-82693](https://cve.now/CVE-2026-82693.md): Tenda AC1206 Web UI telnet TendaTelnet missing authentication (CVSS 10.0)
- [CVE-2026-82542](https://cve.now/CVE-2026-82542.md): Tenda HG10 Boa Web Server formIPv6Routing buffer overflow (CVSS 10.0)
- [CVE-2026-78141](https://cve.now/CVE-2026-78141.md): Tenda CH22 exeCommand formexeCommand command injection (CVSS 5.3)
- [CVE-2026-78063](https://cve.now/CVE-2026-78063.md): Tenda CH22 editFileName formeditFileName command injection (CVSS 5.3)
- [CVE-2026-77031](https://cve.now/CVE-2026-77031.md): Tenda CH22 formcreateFileName command injection (CVSS 5.3)
- [CVE-2026-19924](https://cve.now/CVE-2026-19924.md): Tenda AC10 httpd R7WebsSecurityHandler improper authentication (CVSS 9.3)
- [CVE-2026-19824](https://cve.now/CVE-2026-19824.md): Tenda W20E addIpMacBind ipMacBindListStore stack-based overflow (CVSS 8.7)
- [CVE-2026-19823](https://cve.now/CVE-2026-19823.md): Tenda W20E QoS Rule Deletion delQos formQOSRuleDel stack-based overflow (CVSS 8.7)
- [CVE-2026-19822](https://cve.now/CVE-2026-19822.md): Tenda W20E QoS Edit editQos lstAdd stack-based overflow (CVSS 8.7)
- [CVE-2026-19821](https://cve.now/CVE-2026-19821.md): Tenda AC12 httpd web management interface SetSysAutoRebbotCfg formSetRebootTimer buffer overflow (CVSS 8.7)
- [CVE-2026-19792](https://cve.now/CVE-2026-19792.md): Tenda G0 httpd web management interface module setPortMapping buffer overflow (CVSS 8.7)
- [CVE-2026-19791](https://cve.now/CVE-2026-19791.md): Tenda G0 httpd web management interface module addStaticRoute stack-based overflow (CVSS 8.7)
- [CVE-2026-19790](https://cve.now/CVE-2026-19790.md): Tenda G0 httpd Web Management module formSetPortMirror stack-based overflow (CVSS 8.7)
- [CVE-2026-19789](https://cve.now/CVE-2026-19789.md): Tenda AC1206 httpd web management interface WifiGuestSet set\_wl\_guest\_iplist stack-based overflow (CVSS 8.7)
- [CVE-2026-19788](https://cve.now/CVE-2026-19788.md): Tenda AC1206 httpd web management interface SetOnlineDevName set\_device\_name stack-based overflow (CVSS 8.7)
- [CVE-2026-19750](https://cve.now/CVE-2026-19750.md): Tenda CH/CP/TX3 SSH hard-coded password (CVSS 9.2)
- [CVE-2026-19749](https://cve.now/CVE-2026-19749.md): Tenda CH7 RTSP/ONVIF missing authentication (CVSS 6.3)
- [CVE-2026-19748](https://cve.now/CVE-2026-19748.md): Tenda CH7 Kylin Web Service CWebSessionManager\_ParseSession entropy (CVSS 6.3)
- [CVE-2026-19747](https://cve.now/CVE-2026-19747.md): Tenda CH7 ATE Module Kylin HandleCmd command injection (CVSS 9.3)
- [CVE-2026-19346](https://cve.now/CVE-2026-19346.md): Tenda CH22 CertListInfo formCertListInfo command injection (CVSS 8.7)
- [CVE-2026-16248](https://cve.now/CVE-2026-16248.md): Tenda AC10 httpd/netctrl AdvSetLanip fromAdvSetLanip stack-based overflow (CVSS 8.7)
- [CVE-2026-15696](https://cve.now/CVE-2026-15696.md): Tenda BE12 Pro VirtualSer fromVirtualSer stack-based overflow (CVSS 8.7)
- [CVE-2026-15695](https://cve.now/CVE-2026-15695.md): Tenda BE12 Pro DhcpListClient fromDhcpListClient stack-based overflow (CVSS 8.7)
- [CVE-2026-15694](https://cve.now/CVE-2026-15694.md): Tenda BE12 Pro SetIpBind fromSetIpBind stack-based overflow (CVSS 8.7)
- [CVE-2026-15693](https://cve.now/CVE-2026-15693.md): Tenda BE12 Pro SafeMacFilter fromSafeMacFilter stack-based overflow (CVSS 8.7)
- [CVE-2026-15692](https://cve.now/CVE-2026-15692.md): Tenda BE12 Pro SafeUrlFilter fromSafeUrlFilter stack-based overflow (CVSS 8.7)
- [CVE-2026-15691](https://cve.now/CVE-2026-15691.md): Tenda BE12 Pro SafeClientFilter fromSafeClientFilter stack-based overflow (CVSS 8.7)
- [CVE-2026-15543](https://cve.now/CVE-2026-15543.md): Tenda CH22 CertListInfo formCertListInfo buffer overflow (CVSS 8.7)
- [CVE-2026-11405](https://cve.now/CVE-2026-11405.md): Hidden backdoor authentication mechanism in multiple versions of Tenda firmware allows admin access to web management interface (CVSS 9.8)
- [CVE-2026-13519](https://cve.now/CVE-2026-13519.md): Tenda JD12L NatStaticSetting fromNatStaticSetting stack-based overflow (CVSS 8.7)
- [CVE-2026-13518](https://cve.now/CVE-2026-13518.md): Tenda JD12L addressNat fromAddressNat stack-based overflow (CVSS 8.7)
- [CVE-2026-13517](https://cve.now/CVE-2026-13517.md): Tenda JD12L WifiBasicSet formWifiBasicSet stack-based overflow (CVSS 8.7)
- [CVE-2026-13516](https://cve.now/CVE-2026-13516.md): Tenda JD12L WifiGuestSet fromSetWifiGusetBasic stack-based overflow (CVSS 8.7)
- [CVE-2026-13515](https://cve.now/CVE-2026-13515.md): Tenda JD12L SetPptpServerCfg formSetPPTPServer stack-based overflow (CVSS 8.7)
- [CVE-2026-11557](https://cve.now/CVE-2026-11557.md): Tenda F451 Web Management Natlimit fromNatlimit stack-based overflow (CVSS 8.7)
- [CVE-2026-11556](https://cve.now/CVE-2026-11556.md): Tenda F451 Web Management WriteFacMac formWriteFacMac os command injection (CVSS 8.7)
- [CVE-2026-11553](https://cve.now/CVE-2026-11553.md): Tenda HG7/HG9/HG10 formPPPEdit stack-based overflow (CVSS 8.7)
- [CVE-2026-11528](https://cve.now/CVE-2026-11528.md): Tenda AC18 Web Management getRebootStatus sub\_45304 stack-based overflow (CVSS 8.7)
- [CVE-2026-11524](https://cve.now/CVE-2026-11524.md): Tenda W20E Web Management modifyWifiFilterRules stack-based overflow (CVSS 8.7)
- [CVE-2026-11523](https://cve.now/CVE-2026-11523.md): Tenda W20E Web Management PortalAuth formPortalAuth stack-based overflow (CVSS 8.7)
- [CVE-2026-11522](https://cve.now/CVE-2026-11522.md): Tenda W20E setPortMirror formSetPortMirror stack-based overflow (CVSS 8.7)
- [CVE-2026-11504](https://cve.now/CVE-2026-11504.md): Tenda CX12L Wi-Fi Schedule Configuration Endpoint openSchedWifi setSchedWifi stack-based overflow (CVSS 8.7)
- [CVE-2026-11503](https://cve.now/CVE-2026-11503.md): Tenda CX12L Wi-Fi Configuration Endpoint fast\_setting\_wifi\_set form\_fast\_setting\_wifi\_set stack-based overflow (CVSS 8.7)
- [CVE-2026-11499](https://cve.now/CVE-2026-11499.md): Tenda HG7/HG9/HG10 formDOMAINBLK stack-based overflow (CVSS 9.3)
- [CVE-2026-11498](https://cve.now/CVE-2026-11498.md): Tenda HG7/HG9/HG10 Web Management voip\_other\_set asp\_voip\_OtherSet stack-based overflow (CVSS 8.7)
- [CVE-2026-11493](https://cve.now/CVE-2026-11493.md): Tenda AC15 Samba smb.conf weak password (CVSS 2.3)
- [CVE-2026-10192](https://cve.now/CVE-2026-10192.md): Tenda W12 httpd set\_local\_time\_0 stack-based overflow (CVSS 8.7)
- [CVE-2026-10191](https://cve.now/CVE-2026-10191.md): Tenda W12 httpd cgiWifiMacFilterSet stack-based overflow (CVSS 8.7)
- [CVE-2026-10190](https://cve.now/CVE-2026-10190.md): Tenda W12 Web Management httpd cgiSysWebTimeoutSet denial of service (CVSS 7.1)
- [CVE-2026-10189](https://cve.now/CVE-2026-10189.md): Tenda W12 httpd cgiSysTimeInfoSet stack-based overflow (CVSS 8.7)
- [CVE-2026-10188](https://cve.now/CVE-2026-10188.md): Tenda W12 httpd cgistaKickOff stack-based overflow (CVSS 8.7)
- [CVE-2026-9431](https://cve.now/CVE-2026-9431.md): Tenda F1202 PptpUserAdd fromPptpUserAdd stack-based overflow (CVSS 8.7)
- [CVE-2026-9430](https://cve.now/CVE-2026-9430.md): Tenda F1202 GstDhcpSetSerof formGstDhcpSetSer stack-based overflow (CVSS 8.7)
- [CVE-2026-9429](https://cve.now/CVE-2026-9429.md): Tenda F1202 WrlExtraSet formWrlExtraSet stack-based overflow (CVSS 8.7)
- [CVE-2026-9428](https://cve.now/CVE-2026-9428.md): Tenda F1202 PPTPUserSetting fromPPTPUserSetting stack-based overflow (CVSS 8.7)
- [CVE-2026-9389](https://cve.now/CVE-2026-9389.md): Tenda F456 L7Im frmL7ImForm buffer overflow (CVSS 8.7)
- [CVE-2026-8265](https://cve.now/CVE-2026-8265.md): Tenda AC6 httpd getLogFile get\_log\_file os command injection (CVSS 5.1)
- [CVE-2026-8264](https://cve.now/CVE-2026-8264.md): Tenda AC6 httpd WifiApScan formWifiApScan os command injection (CVSS 5.3)
- [CVE-2026-8263](https://cve.now/CVE-2026-8263.md): Tenda AC6 httpd WifiExtraSet fromSetWirelessRepeat os command injection (CVSS 5.1)
- [CVE-2026-8259](https://cve.now/CVE-2026-8259.md): Tenda AC6 httpd telnet os command injection (CVSS 5.1)
- [CVE-2026-8138](https://cve.now/CVE-2026-8138.md): Tenda CX12L SetPptpServerCfg” formSetPPTPServer stack-based overflow (CVSS 8.7)
- [CVE-2026-7470](https://cve.now/CVE-2026-7470.md): Tenda 4G300 SafeMacFilter sub\_427C3C stack-based overflow (CVSS 8.7)
- [CVE-2026-7469](https://cve.now/CVE-2026-7469.md): Tenda 4G300 DelFil sub\_425A28 command injection (CVSS 5.3)
- [CVE-2018-25318](https://cve.now/CVE-2018-25318.md): Tenda FH303/A300 V5.07.68\_EN Cookie Session Weakness DNS Change (CVSS 9.3)
- [CVE-2018-25317](https://cve.now/CVE-2018-25317.md): Tenda W3002R/A302/W309R V5.07.64\_en Cookie Session Weakness DNS Change (CVSS 9.3)
- [CVE-2018-25316](https://cve.now/CVE-2018-25316.md): Tenda W308R v2 V5.07.48 Cookie Session Weakness DNS Change (CVSS 9.3)
- [CVE-2026-7160](https://cve.now/CVE-2026-7160.md): Tenda HG3 formTracert command injection (CVSS 8.7)
- [CVE-2026-7151](https://cve.now/CVE-2026-7151.md): Tenda HG3 formIPv6Routing formUploadConfig stack-based overflow (CVSS 8.7)
- [CVE-2026-7119](https://cve.now/CVE-2026-7119.md): Tenda HG3 formCountrystr os command injection (CVSS 8.7)
- [CVE-2026-7102](https://cve.now/CVE-2026-7102.md): Tenda F456 httpd WriteFacMac FromWriteFacMac command injection (CVSS 5.3)
- [CVE-2026-7101](https://cve.now/CVE-2026-7101.md): Tenda F456 httpd WrlclientSet fromWrlclientSet buffer overflow (CVSS 8.7)
- [CVE-2026-7100](https://cve.now/CVE-2026-7100.md): Tenda F456 httpd Natlimit fromNatlimitof buffer overflow (CVSS 8.7)
- [CVE-2026-7099](https://cve.now/CVE-2026-7099.md): Tenda F456 httpd QuickIndex formQuickIndex buffer overflow (CVSS 8.7)
- [CVE-2026-7098](https://cve.now/CVE-2026-7098.md): Tenda F456 httpd DhcpListClient fromDhcpListClient buffer overflow (CVSS 8.7)
- [CVE-2026-7097](https://cve.now/CVE-2026-7097.md): Tenda F456 httpd webExcptypemanFilter fromwebExcptypemanFilter buffer overflow (CVSS 8.7)
- [CVE-2026-7096](https://cve.now/CVE-2026-7096.md): Tenda HG3 formgponConf os command injection (CVSS 8.7)
- [CVE-2026-7082](https://cve.now/CVE-2026-7082.md): Tenda F456 httpd WrlExtraSet formWrlExtraSet buffer overflow (CVSS 8.7)
- [CVE-2026-7081](https://cve.now/CVE-2026-7081.md): Tenda F456 httpd GstDhcpSetSer fromGstDhcpSetSer buffer overflow (CVSS 8.7)
- [CVE-2026-7080](https://cve.now/CVE-2026-7080.md): Tenda F456 httpd PPTPUserSetting fromPPTPUserSetting buffer overflow (CVSS 8.7)
- [CVE-2026-7079](https://cve.now/CVE-2026-7079.md): Tenda F456 httpd AdvSetWan fromAdvSetWan buffer overflow (CVSS 8.7)
- [CVE-2026-7078](https://cve.now/CVE-2026-7078.md): Tenda F456 httpd SetIpBind fromSetIpBind buffer overflow (CVSS 8.7)
- [CVE-2026-7057](https://cve.now/CVE-2026-7057.md): Tenda F456 httpd setcfm buffer overflow (CVSS 8.7)
- [CVE-2026-7056](https://cve.now/CVE-2026-7056.md): Tenda F456 httpd SafeUrlFilter fromSafeUrlFilter buffer overflow (CVSS 8.7)
- [CVE-2026-7055](https://cve.now/CVE-2026-7055.md): Tenda F456 httpd VirtualSer fromVirtualSer buffer overflow (CVSS 8.7)
- [CVE-2026-7054](https://cve.now/CVE-2026-7054.md): Tenda F456 httpd PPTPDClient fromPptpUserAdd buffer overflow (CVSS 8.7)
- [CVE-2026-7053](https://cve.now/CVE-2026-7053.md): Tenda F456 httpd L7Prot frmL7ProtForm buffer overflow (CVSS 8.7)
- [CVE-2026-7036](https://cve.now/CVE-2026-7036.md): Tenda i9 HTTP R7WebsSecurityHandlerfunction path traversal (CVSS 6.9)
- [CVE-2026-7035](https://cve.now/CVE-2026-7035.md): Tenda FH1202 httpd WrlclientSet fromWrlclientSet stack-based overflow (CVSS 8.7)
- [CVE-2026-7034](https://cve.now/CVE-2026-7034.md): Tenda FH1202 httpd WrlExtraSet stack-based overflow (CVSS 8.7)
- [CVE-2026-7033](https://cve.now/CVE-2026-7033.md): Tenda F456 SafeClientFilter fromSafeClientFilter buffer overflow (CVSS 8.7)
- [CVE-2026-7032](https://cve.now/CVE-2026-7032.md): Tenda F456 SafeEmailFilter buffer overflow (CVSS 8.7)
- [CVE-2026-7031](https://cve.now/CVE-2026-7031.md): Tenda F456 SafeMacFilter fromSafeMacFilter buffer overflow (CVSS 8.7)
- [CVE-2026-7030](https://cve.now/CVE-2026-7030.md): Tenda F456 RouteStatic fromRouteStatic buffer overflow (CVSS 8.7)
- [CVE-2026-7029](https://cve.now/CVE-2026-7029.md): Tenda F456 addressNat fromaddressNat buffer overflow (CVSS 8.7)
- [CVE-2026-7019](https://cve.now/CVE-2026-7019.md): Tenda F456 P2pListFilter fromP2pListFilter buffer overflow (CVSS 8.7)
- [CVE-2026-6989](https://cve.now/CVE-2026-6989.md): Tenda F453 Telnet Service telnet TendaTelnet command injection (CVSS 5.3)
- [CVE-2026-6988](https://cve.now/CVE-2026-6988.md): Tenda HG10 Boa Service formRouting formRoute buffer overflow (CVSS 8.7)
- [CVE-2026-6632](https://cve.now/CVE-2026-6632.md): Tenda F451 httpd SafeClientFilter fromSafeClientFilter buffer overflow (CVSS 8.7)
- [CVE-2026-6631](https://cve.now/CVE-2026-6631.md): Tenda F451 httpd webExcptypemanFilter fromwebExcptypemanFilter buffer overflow (CVSS 8.7)
- [CVE-2026-6630](https://cve.now/CVE-2026-6630.md): Tenda F451 httpd GstDhcpSetSer fromGstDhcpSetSer buffer overflow (CVSS 8.7)
- [CVE-2026-6200](https://cve.now/CVE-2026-6200.md): Tenda F456 webtypelibrary formwebtypelibrary stack-based overflow (CVSS 8.7)
- [CVE-2026-6199](https://cve.now/CVE-2026-6199.md): Tenda F456 qossetting fromqossetting stack-based overflow (CVSS 8.7)
- [CVE-2026-6198](https://cve.now/CVE-2026-6198.md): Tenda F456 NatStaticSetting fromNatStaticSetting stack-based overflow (CVSS 8.7)
- [CVE-2026-6197](https://cve.now/CVE-2026-6197.md): Tenda F456 AdvSetWrlsafeset formWrlsafeset stack-based overflow (CVSS 8.7)
- [CVE-2026-6196](https://cve.now/CVE-2026-6196.md): Tenda F456 exeCommand fromexeCommand stack-based overflow (CVSS 8.7)
- [CVE-2026-6137](https://cve.now/CVE-2026-6137.md): Tenda F451 AdvSetWan fromAdvSetWan stack-based overflow (CVSS 8.7)
- [CVE-2026-6136](https://cve.now/CVE-2026-6136.md): Tenda F451 L7Im frmL7ImForm stack-based overflow (CVSS 8.7)
- [CVE-2026-6135](https://cve.now/CVE-2026-6135.md): Tenda F451 SetIpBind fromSetIpBind stack-based overflow (CVSS 8.7)
- [CVE-2026-6134](https://cve.now/CVE-2026-6134.md): Tenda F451 qossetting fromqossetting stack-based overflow (CVSS 8.7)
- [CVE-2026-6133](https://cve.now/CVE-2026-6133.md): Tenda F451 SafeUrlFilter fromSafeUrlFilter stack-based overflow (CVSS 8.7)
- [CVE-2026-6124](https://cve.now/CVE-2026-6124.md): Tenda F451 httpd SafeMacFilter fromSafeMacFilter stack-based overflow (CVSS 8.7)
- [CVE-2026-6123](https://cve.now/CVE-2026-6123.md): Tenda F451 httpd addressNat fromAddressNat stack-based overflow (CVSS 8.7)
- [CVE-2026-6122](https://cve.now/CVE-2026-6122.md): Tenda F451 httpd L7Prot frmL7ProtForm stack-based overflow (CVSS 8.7)
- [CVE-2026-6121](https://cve.now/CVE-2026-6121.md): Tenda F451 httpd WrlclientSet stack-based overflow (CVSS 8.7)
- [CVE-2026-6120](https://cve.now/CVE-2026-6120.md): Tenda F451 httpd DhcpListClient fromDhcpListClient stack-based overflow (CVSS 8.7)
- [CVE-2026-6024](https://cve.now/CVE-2026-6024.md): Tenda i6 HTTP R7WebsSecurityHandlerfunction path traversal (CVSS 6.9)
- [CVE-2026-6016](https://cve.now/CVE-2026-6016.md): Tenda AC9 POST Request WizardHandle decodePwd stack-based overflow (CVSS 8.7)
- [CVE-2026-6015](https://cve.now/CVE-2026-6015.md): Tenda AC9 POST Request QuickIndex formQuickIndex stack-based overflow (CVSS 8.7)
- [CVE-2026-5992](https://cve.now/CVE-2026-5992.md): Tenda F451 P2pListFilter fromP2pListFilter stack-based overflow (CVSS 8.7)
- [CVE-2026-5991](https://cve.now/CVE-2026-5991.md): Tenda F451 WrlExtraSet formWrlExtraSet stack-based overflow (CVSS 8.7)
- [CVE-2026-5990](https://cve.now/CVE-2026-5990.md): Tenda F451 SafeEmailFilter fromSafeEmailFilter stack-based overflow (CVSS 8.7)
- [CVE-2026-5989](https://cve.now/CVE-2026-5989.md): Tenda F451 RouteStatic fromRouteStatic stack-based overflow (CVSS 8.7)
- [CVE-2026-5988](https://cve.now/CVE-2026-5988.md): Tenda F451 AdvSetWrlsafeset formWrlsafeset stack-based overflow (CVSS 8.7)
- [CVE-2026-5962](https://cve.now/CVE-2026-5962.md): Tenda CH22 httpd R7WebsSecurityHandlerfunction path traversal (CVSS 6.9)
- [CVE-2026-5849](https://cve.now/CVE-2026-5849.md): Tenda i12 HTTP path traversal (CVSS 6.9)
- [CVE-2026-5841](https://cve.now/CVE-2026-5841.md): Tenda i3 HTTP R7WebsSecurityHandler path traversal (CVSS 6.9)
- [CVE-2026-5830](https://cve.now/CVE-2026-5830.md): Tenda AC15 SysToolChangePwd websGetVar stack-based overflow (CVSS 8.7)
- [CVE-2026-5687](https://cve.now/CVE-2026-5687.md): Tenda CX12L NatStaticSetting fromNatStaticSetting stack-based overflow (CVSS 8.7)
- [CVE-2026-5686](https://cve.now/CVE-2026-5686.md): Tenda CX12L RouteStatic fromRouteStatic stack-based overflow (CVSS 8.7)
- [CVE-2026-5685](https://cve.now/CVE-2026-5685.md): Tenda CX12L addressNat fromAddressNat stack-based overflow (CVSS 8.7)
- [CVE-2026-5684](https://cve.now/CVE-2026-5684.md): Tenda CX12L webExcptypemanFilter fromwebExcptypemanFilter stack-based overflow (CVSS 8.6)
- [CVE-2026-5683](https://cve.now/CVE-2026-5683.md): Tenda CX12L P2pListFilter fromP2pListFilter stack-based overflow (CVSS 5.1)
- [CVE-2026-5609](https://cve.now/CVE-2026-5609.md): Tenda i12 Parameter wifiSSIDset formwrlSSIDset stack-based overflow (CVSS 8.7)
- [CVE-2026-5605](https://cve.now/CVE-2026-5605.md): Tenda CH22 WrlExtraSet formWrlExtraSet stack-based overflow (CVSS 8.7)
- [CVE-2026-5604](https://cve.now/CVE-2026-5604.md): Tenda CH22 Parameter CertLocalPrecreate formCertLocalPrecreate stack-based overflow (CVSS 8.7)
- [CVE-2026-5567](https://cve.now/CVE-2026-5567.md): Tenda M3 Destination setAdvPolicyData buffer overflow (CVSS 8.7)
- [CVE-2026-5550](https://cve.now/CVE-2026-5550.md): Tenda AC10 httpd fromSysToolChangePwd stack-based overflow (CVSS 8.7)
- [CVE-2026-5549](https://cve.now/CVE-2026-5549.md): Tenda AC10 RSA 2048-bit Private Key privkeySrv.pem hard-coded key (CVSS 6.9)
- [CVE-2026-5548](https://cve.now/CVE-2026-5548.md): Tenda AC10 httpd fromSysToolChangePwd stack-based overflow (CVSS 8.7)
- [CVE-2026-5547](https://cve.now/CVE-2026-5547.md): Tenda AC10 httpd formAddMacfilterRule os command injection (CVSS 5.3)
- [CVE-2026-5527](https://cve.now/CVE-2026-5527.md): Tenda 4G03 Pro ECDSA P-256 Private Key server.key hard-coded key (CVSS 6.9)
- [CVE-2026-5526](https://cve.now/CVE-2026-5526.md): Tenda 4G03 Pro httpd access control (CVSS 6.9)
- [CVE-2026-5339](https://cve.now/CVE-2026-5339.md): Tenda G103 Setting gpon.lua action\_set\_net\_settings command injection (CVSS 5.1)
- [CVE-2026-5338](https://cve.now/CVE-2026-5338.md): Tenda G103 Setting system.lua action\_set\_system\_settings command injection (CVSS 5.1)
- [CVE-2026-5204](https://cve.now/CVE-2026-5204.md): Tenda CH22 Parameter webtypelibrary formWebTypeLibrary stack-based overflow (CVSS 8.7)
- [CVE-2026-5156](https://cve.now/CVE-2026-5156.md): Tenda CH22 Parameter QuickIndex formQuickIndex stack-based overflow (CVSS 8.7)
- [CVE-2026-5155](https://cve.now/CVE-2026-5155.md): Tenda CH22 Parameter AdvSetWan fromAdvSetWan stack-based overflow (CVSS 8.7)
- [CVE-2026-5154](https://cve.now/CVE-2026-5154.md): Tenda CH22 Parameter setcfm fromSetCfm stack-based overflow (CVSS 8.7)
- [CVE-2026-5153](https://cve.now/CVE-2026-5153.md): Tenda CH22 WriteFacMac FormWriteFacMac command injection (CVSS 5.3)
- [CVE-2026-5152](https://cve.now/CVE-2026-5152.md): Tenda CH22 createFileName formCreateFileName stack-based overflow (CVSS 8.7)
- [CVE-2026-5046](https://cve.now/CVE-2026-5046.md): Tenda FH1201 Parameter WrlExtraSet formWrlExtraSet stack-based overflow (CVSS 8.7)
- [CVE-2026-5045](https://cve.now/CVE-2026-5045.md): Tenda FH1201 Parameter WrlclientSet stack-based overflow (CVSS 8.7)
- [CVE-2026-5036](https://cve.now/CVE-2026-5036.md): Tenda 4G06 Endpoint DhcpListClient fromDhcpListClient stack-based overflow (CVSS 8.7)
- [CVE-2026-5021](https://cve.now/CVE-2026-5021.md): Tenda F453 httpd PPTPUserSetting fromPPTPUserSetting stack-based overflow (CVSS 8.7)
- [CVE-2026-4975](https://cve.now/CVE-2026-4975.md): Tenda AC15 POST Request setcfm formSetCfm memory corruption (CVSS 8.7)
- [CVE-2026-4974](https://cve.now/CVE-2026-4974.md): Tenda AC7 POST Request SetSysTimeCfg fromSetSysTime memory corruption (CVSS 8.7)
- [CVE-2026-4961](https://cve.now/CVE-2026-4961.md): Tenda AC6 POST Request QuickIndex formQuickIndex stack-based overflow (CVSS 8.7)
- [CVE-2026-4960](https://cve.now/CVE-2026-4960.md): Tenda AC6 POST Request WizardHandle fromWizardHandle stack-based overflow (CVSS 8.7)
- [CVE-2026-4906](https://cve.now/CVE-2026-4906.md): Tenda AC5 POST Request WizardHandle decodePwd stack-based overflow (CVSS 8.7)
- [CVE-2026-4905](https://cve.now/CVE-2026-4905.md): Tenda AC5 POST Request WifiWpsOOB formWifiWpsOOB stack-based overflow (CVSS 8.7)
- [CVE-2026-4904](https://cve.now/CVE-2026-4904.md): Tenda AC5 POST Request setcfm formSetCfm stack-based overflow (CVSS 8.7)
- [CVE-2026-4903](https://cve.now/CVE-2026-4903.md): Tenda AC5 POST Request QuickIndex formQuickIndex memory corruption (CVSS 8.7)
- [CVE-2026-4902](https://cve.now/CVE-2026-4902.md): Tenda AC5 POST Request addressNat fromAddressNat memory corruption (CVSS 8.7)
- [CVE-2026-4567](https://cve.now/CVE-2026-4567.md): Tenda A15 UploadCfg stack-based overflow (CVSS 9.3)
- [CVE-2026-4565](https://cve.now/CVE-2026-4565.md): Tenda AC21 SetNetControlList formSetQosBand buffer overflow (CVSS 8.7)
- [CVE-2026-4554](https://cve.now/CVE-2026-4554.md): Tenda F453 WriteFacMac FormWriteFacMac privilege escalation (CVSS 5.3)
- [CVE-2026-4553](https://cve.now/CVE-2026-4553.md): Tenda F453 Parameters Natlimit fromNatlimit stack-based overflow (CVSS 8.7)
- [CVE-2026-4552](https://cve.now/CVE-2026-4552.md): Tenda F453 Parameters VirtualSer fromVirtualSer memory corruption (CVSS 8.7)
- [CVE-2026-4551](https://cve.now/CVE-2026-4551.md): Tenda F453 Parameters SafeClientFilter fromSafeClientFilter memory corruption (CVSS 8.7)
- [CVE-2026-4535](https://cve.now/CVE-2026-4535.md): Tenda FH451 WrlclientSet stack-based overflow (CVSS 8.7)
- [CVE-2026-4534](https://cve.now/CVE-2026-4534.md): Tenda FH451 WrlExtraSet formWrlExtraSet stack-based overflow (CVSS 8.7)
- [CVE-2026-4493](https://cve.now/CVE-2026-4493.md): Tenda A18 Pro MAC Filtering Configuration Endpoint setMacFilterCfg sub\_423B50 stack-based overflow (CVSS 8.7)
- [CVE-2026-4492](https://cve.now/CVE-2026-4492.md): Tenda A18 Pro formSetQosBand set\_qosMib\_list stack-based overflow (CVSS 8.7)
- [CVE-2026-4491](https://cve.now/CVE-2026-4491.md): Tenda A18 Pro SetIpMacBind fromSetIpMacBind stack-based overflow (CVSS 8.7)
- [CVE-2026-4490](https://cve.now/CVE-2026-4490.md): Tenda A18 Pro openSchedWifi setSchedWifi stack-based overflow (CVSS 8.7)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/tenda
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.