Browse CVEs

HIGH 8.8 CVE-2026-3678 A vulnerability was determined in Tenda FH451 1.0.0.9. Affected is the function sub_3C434 of the file /goform/AdvSetWan. This manipulation of the arg… Fh451 Firmware No fix yet Fix from $1,9502026-03-07 HIGH 8.8 CVE-2026-3677 A vulnerability was found in Tenda FH451 1.0.0.9. This impacts the function fromSetCfm of the file /goform/setcfm. The manipulation of the argument f… Fh451 Firmware No fix yet Fix from $1,9502026-03-07 HIGH 7.5 CVE-2025-69765 Tenda AX3 firmware v16.03.12.11 contains a stack overflow in formGetIptv function and the list parameter, which can cause memory corruption and enabl… Ax3 Firmware No fix yet Fix from $1,9502026-03-03 CRITICAL 9.8 CVE-2026-24103 A buffer overflow vulnerability was discovered in goform/formSetMacFilterCfg in Tenda AC15V1.0 V15.03.05.18_multi. Ac15 Firmware Mitigation only Fix from $2,3002026-03-03 CRITICAL 9.8 CVE-2026-24105 An issue was discovered in goform/formsetUsbUnload in Tenda AC15V1.0 V15.03.05.18_multi. The value of `v1` was not checked, potentially leading to a … Ac15 Firmware Mitigation only Fix from $2,3002026-03-02 HIGH 7.5 CVE-2025-70252 An issue was discovered in /goform/WifiWpsStart in Tenda AC6V2.0 V15.03.06.23_multi. The index and mode are controllable. If the conditions are met t… Ac6 Firmware No fix yet Fix from $1,9502026-03-02 CRITICAL 9.8 CVE-2026-24101 An issue was discovered in goform/formSetIptv in Tenda AC15V1.0 V15.03.05.18_multi. When the condition is met, `s1_1` will be passed into sub_B0488, … Ac15 Firmware Mitigation only Fix from $2,3002026-03-02 CRITICAL 9.8 CVE-2026-24110 An issue was discovered in Tenda W20E V4.0br_V15.11.0.6. Attackers may send overly long `addDhcpRules` data. When these rules enter the `addDhcpRule`… W20e Firmware Mitigation only Fix from $2,3002026-03-02 CRITICAL 9.8 CVE-2026-24112 An issue was discovered in Tenda W20E V4.0br_V15.11.0.6. Attackers may exploit the vulnerability by specifying the value of `userInfo`. When `userInf… W20e Firmware Mitigation only Fix from $2,3002026-03-02 CRITICAL 9.8 CVE-2026-24107 An issue was discovered in Tenda W20E V4.0br_V15.11.0.6. Failure to validate the value of `usbPartitionName`, which is directly used in `doSystemCmd`… W20e Firmware Mitigation only Fix from $2,3002026-03-02 CRITICAL 9.8 CVE-2026-24108 An issue was discovered in Tenda W20E V4.0br_V15.11.0.6. Attackers may exploit the vulnerability by controlling the value of `nptr`. When this value … W20e Firmware Mitigation only Fix from $2,3002026-03-02 CRITICAL 9.8 CVE-2026-24109 An issue was discovered in Tenda W20E V4.0br_V15.11.0.6. Attackers may exploit the vulnerability by controlling the value of `picName`. When this val… W20e Firmware Mitigation only Fix from $2,3002026-03-02 CRITICAL 9.8 CVE-2026-24111 An issue was discovered in Tenda W20E V4.0br_V15.11.0.6. Attackers may exploit the vulnerability by specifying the value of `userInfo`. When `userInf… W20e Firmware Mitigation only Fix from $2,3002026-03-02 CRITICAL 9.8 CVE-2026-24113 An issue was discovered in Tenda W20E V4.0br_V15.11.0.6. Attackers may exploit the vulnerability by controlling the value of `nptr`. When this value … W20e Firmware Mitigation only Fix from $2,3002026-03-02 CRITICAL 9.8 CVE-2026-24114 An issue was discovered in Tenda W20E V4.0br_V15.11.0.6. Failure to validate `pPortMapIndex` may lead to buffer overflows when using `strcpy`. W20e Firmware Mitigation only Fix from $2,3002026-03-02 CRITICAL 9.8 CVE-2026-24115 An issue was discovered in Tenda W20E V4.0br_V15.11.0.6. Failure to validate the sizes of `gstup` and `gstdwn` before concatenating them into `gstrul… W20e Firmware Mitigation only Fix from $2,3002026-03-02 HIGH 8.8 CVE-2026-3399 A vulnerability was identified in Tenda F453 1.0.0.3. Affected by this vulnerability is the function fromGstDhcpSetSer of the file /goform/GstDhcpSet… F453 Firmware No fix yet Fix from $1,9502026-03-01 HIGH 8.8 CVE-2026-3398 A vulnerability was determined in Tenda F453 1.0.0.3. Affected is the function fromAdvSetWan of the file /goform/AdvSetWan of the component httpd. Ex… F453 Firmware No fix yet Fix from $1,9502026-03-01 HIGH 8.8 CVE-2026-3380 A vulnerability was found in Tenda F453 1.0.0.3. This issue affects the function frmL7ImForm of the file /goform/L7Im. The manipulation of the argume… F453 Firmware No fix yet Fix from $1,9502026-03-01 HIGH 8.8 CVE-2026-3379 A vulnerability has been found in Tenda F453 1.0.0.3. This vulnerability affects the function fromSetIpBind of the file /goform/SetIpBind. The manipu… F453 Firmware No fix yet Fix from $1,9502026-03-01 HIGH 8.8 CVE-2026-3378 A flaw has been found in Tenda F453 1.0.0.3. This affects the function fromqossetting of the file /goform/qossetting. Executing a manipulation of the… F453 Firmware No fix yet Fix from $1,9502026-03-01 HIGH 8.8 CVE-2026-3377 A vulnerability was detected in Tenda F453 1.0.0.3. Affected by this issue is the function fromSafeUrlFilter of the file /goform/SafeUrlFilter. Perfo… F453 Firmware No fix yet Fix from $1,9502026-03-01 HIGH 8.8 CVE-2026-3376 A security vulnerability has been detected in Tenda F453 1.0.0.3. Affected by this vulnerability is the function fromSafeMacFilter of the file /gofor… F453 Firmware No fix yet Fix from $1,9502026-02-28 HIGH 8.8 CVE-2026-3274 A security flaw has been discovered in Tenda F453 1.0.0.3. Affected by this issue is the function frmL7ProtForm of the file /goform/L7Prot of the com… F453 Firmware No fix yet Fix from $1,9502026-02-27 HIGH 8.8 CVE-2026-3275 A weakness has been identified in Tenda F453 1.0.0.3. This affects the function fromAddressNat of the file /goform/addressNat of the component httpd.… F453 Firmware No fix yet Fix from $1,9502026-02-27 HIGH 8.8 CVE-2026-3273 A vulnerability was identified in Tenda F453 1.0.0.3. Affected by this vulnerability is the function formWrlsafeset of the file /goform/AdvSetWrlsafe… F453 Firmware No fix yet Fix from $1,9502026-02-27 CRITICAL 9.8 CVE-2026-3271 A vulnerability was found in Tenda F453 1.0.0.3. This impacts the function fromP2pListFilter of the file /goform/P2pListFilterof of the component htt… F453 Firmware Mitigation only Fix from $2,3002026-02-27 HIGH 8.8 CVE-2026-3272 A vulnerability was determined in Tenda F453 1.0.0.3. Affected is the function fromDhcpListClient of the file /goform/DhcpListClient of the component… F453 Firmware No fix yet Fix from $1,9502026-02-27 HIGH 8.8 CVE-2026-3169 A security vulnerability has been detected in Tenda F453 1.0.0.3. This impacts the function fromSafeEmailFilter of the file /goform/SafeEmailFilter o… F453 Firmware No fix yet Fix from $1,9502026-02-25 HIGH 8.8 CVE-2026-3166 A vulnerability was identified in Tenda F453 1.0.0.3. The affected element is the function fromRouteStatic of the file /goform/RouteStatic of the com… F453 Firmware No fix yet Fix from $1,9502026-02-25