Browse CVEs

CRITICAL 9.8 CVE-2026-51846 In Tenda AC7 v15.03.06.44, the wanSpeed parameter of the route /goform/AdvSetMacMtuWan has a stack buffer overflow vulnerability that can lead to rem… Ac7 Firmware Mitigation only Fix from $2,3002026-06-19 CRITICAL 9.8 CVE-2026-51843 Tenda AC7 v15.03.06.44 contains a stack buffer overflow vulnerability in the /goform/AdvSetMacMtuWan interface via the wanMTU parameter. Ac7 Firmware Mitigation only Fix from $2,3002026-06-19 CRITICAL 9.8 CVE-2026-51844 Tenda AC7 v15.03.06.44 contains a stack buffer overflow vulnerability in the /goform/AdvSetMacMtuWan interface via the cloneType parameter. Ac7 Firmware Mitigation only Fix from $2,3002026-06-19 CRITICAL 9.8 CVE-2026-51845 Tenda AC7 v15.03.06.44 contains a stack buffer overflow vulnerability in the /goform/AdvSetMacMtuWan interface via the mac parameter. Ac7 Firmware Mitigation only Fix from $2,3002026-06-19 HIGH 7.2 CVE-2026-8265 A security vulnerability has been detected in Tenda AC6 15.03.06.23. Affected by this issue is the function get_log_file of the file /goform/getLogFi… Ac6 Firmware No fix yet Fix from $1,9502026-05-11 HIGH 8.8 CVE-2026-8264 A weakness has been identified in Tenda AC6 15.03.06.23. Affected by this vulnerability is the function formWifiApScan of the file /goform/WifiApScan… Ac6 Firmware No fix yet Fix from $1,9502026-05-11 CRITICAL 9.8 CVE-2026-8263 A security flaw has been discovered in Tenda AC6 15.03.06.49_multi_TDE01. Affected is the function fromSetWirelessRepeat of the file /goform/WifiExtr… Ac10u Firmware Mitigation only Fix from $2,3002026-05-11 HIGH 7.2 CVE-2026-8259 A vulnerability has been found in Tenda AC6 2.0/15.03.06.23. The affected element is an unknown function of the file /goform/telnet of the component … Ac6 Firmware No fix yet Fix from $1,9502026-05-11 HIGH 8.8 CVE-2026-8138 A vulnerability was found in Tenda CX12L 16.03.53.12. This issue affects the function formSetPPTPServer of the file /goform/SetPptpServerCfg”. The ma… Cx12l Firmware No fix yet Fix from $1,9502026-05-08 HIGH 8.8 CVE-2026-7470 A flaw has been found in Tenda 4G300 US_4G300V1.0Mt_V1.01.42_CN_TDC01. Affected is the function sub_427C3C of the file /goform/SafeMacFilter. This ma… 4g300 Firmware Mitigation only Fix from $1,9502026-04-30 MEDIUM 6.3 CVE-2026-7469 A vulnerability was detected in Tenda 4G300 US_4G300V1.0Mt_V1.01.42_CN_TDC01. This impacts the function sub_425A28 of the file /goform/DelFil. The ma… 4g300 Firmware Mitigation only Fix from $1,6002026-04-30 CRITICAL 9.8 CVE-2018-25316 Tenda W308R v2 V5.07.48 contains a cookie session weakness vulnerability that allows unauthenticated attackers to modify DNS settings by exploiting i… W308r Firmware Mitigation only Fix from $2,3002026-04-29 CRITICAL 9.8 CVE-2018-25317 Tenda W3002R/A302/W309R wireless routers version V5.07.64_en contain a cookie session weakness vulnerability that allows unauthenticated attackers to… W309r Firmware Mitigation only Fix from $2,3002026-04-29 CRITICAL 9.8 CVE-2018-25318 Tenda FH303/A300 firmware V5.07.68_EN contains a session weakness vulnerability that allows unauthenticated attackers to modify DNS settings by explo… Fh303 Firmware Mitigation only Fix from $2,3002026-04-29 HIGH 8.8 CVE-2026-7160 A vulnerability was determined in Tenda HG3 2.0. This vulnerability affects the function formTracert of the file /boaform/formTracert. Executing a ma… Hg3 Firmware No fix yet Fix from $1,9502026-04-27 HIGH 8.8 CVE-2026-7151 A vulnerability was determined in Tenda HG3 2.0. Impacted is the function formUploadConfig of the file /boaform/formIPv6Routing. This manipulation of… Hg3 Firmware No fix yet Fix from $1,9502026-04-27 CRITICAL 9.8 CVE-2026-31255 A command injection vulnerability exists in Tenda AC18 V15.03.05.05_multi. The vulnerability is located in the /goform/SetSambaCfg interface, where i… Ac18 Firmware Mitigation only Fix from $2,3002026-04-27 HIGH 8.8 CVE-2026-7119 A vulnerability was detected in Tenda HG3 2.0. The impacted element is an unknown function of the file /boaform/formCountrystr. The manipulation of t… Hg3 Firmware No fix yet Fix from $1,9502026-04-27 HIGH 8.8 CVE-2026-7098 A security vulnerability has been detected in Tenda F456 1.0.0.5. Impacted is the function fromDhcpListClient of the file /goform/DhcpListClient of t… F456 Firmware No fix yet Fix from $1,9502026-04-27 HIGH 8.8 CVE-2026-7099 A vulnerability was detected in Tenda F456 1.0.0.5. The affected element is the function formQuickIndex of the file /goform/QuickIndex of the compone… F456 Firmware No fix yet Fix from $1,9502026-04-27 HIGH 8.8 CVE-2026-7100 A flaw has been found in Tenda F456 1.0.0.5. The impacted element is the function fromNatlimitof of the file /goform/Natlimit of the component httpd.… F456 Firmware No fix yet Fix from $1,9502026-04-27 HIGH 8.8 CVE-2026-7101 A vulnerability has been found in Tenda F456 1.0.0.5. This affects the function fromWrlclientSet of the file /goform/WrlclientSet of the component ht… F456 Firmware No fix yet Fix from $1,9502026-04-27 HIGH 8.8 CVE-2026-7102 A vulnerability was found in Tenda F456 1.0.0.5. This impacts the function FromWriteFacMac of the file /goform/WriteFacMac of the component httpd. Th… F456 Firmware No fix yet Fix from $1,9502026-04-27 HIGH 8.8 CVE-2026-7096 A security flaw has been discovered in Tenda HG3 2.0 300003070. This vulnerability affects the function formgponConf of the file /boaform/admin/formg… Hg3 Firmware No fix yet Fix from $1,9502026-04-27 HIGH 8.8 CVE-2026-7097 A weakness has been identified in Tenda F456 1.0.0.5. This issue affects the function fromwebExcptypemanFilter of the file /goform/webExcptypemanFilt… F456 Firmware No fix yet Fix from $1,9502026-04-27 HIGH 8.8 CVE-2026-7081 A vulnerability was detected in Tenda F456 1.0.0.5. Affected is the function fromGstDhcpSetSer of the file /goform/GstDhcpSetSer of the component htt… F456 Firmware No fix yet Fix from $1,9502026-04-27 HIGH 8.8 CVE-2026-7082 A flaw has been found in Tenda F456 1.0.0.5. Affected by this vulnerability is the function formWrlExtraSet of the file /goform/WrlExtraSet of the co… F456 Firmware No fix yet Fix from $1,9502026-04-27 HIGH 8.8 CVE-2026-7080 A security vulnerability has been detected in Tenda F456 1.0.0.5. This impacts the function fromPPTPUserSetting of the file /goform/PPTPUserSetting o… F456 Firmware No fix yet Fix from $1,9502026-04-27 HIGH 8.8 CVE-2026-7078 A security flaw has been discovered in Tenda F456 1.0.0.5. The impacted element is the function fromSetIpBind of the file /goform/SetIpBind of the co… F456 Firmware No fix yet Fix from $1,9502026-04-27 HIGH 8.8 CVE-2026-7079 A weakness has been identified in Tenda F456 1.0.0.5. This affects the function fromAdvSetWan of the file /goform/AdvSetWan of the component httpd. T… F456 Firmware No fix yet Fix from $1,9502026-04-27