Browse CVEs

HIGH 7.5 CVE-2026-2148 A security vulnerability has been detected in Tenda AC21 16.03.08.16. Affected is an unknown function of the file /cgi-bin/DownloadFlash of the compo… Ac21 Firmware No fix yet Fix from $1,9502026-02-08 MEDIUM 5.3 CVE-2026-2147 A weakness has been identified in Tenda AC21 16.03.08.16. This impacts an unknown function of the file /cgi-bin/DownloadLog of the component Web Mana… Ac21 Firmware No fix yet Fix from $1,6002026-02-08 HIGH 7.3 CVE-2026-1689 A vulnerability was detected in Tenda HG10 US_HG7_HG9_HG10re_300001138_en_xpon. The impacted element is the function checkUserFromLanOrWan of the fil… Hg10 Firmware No fix yet Fix from $1,9502026-01-30 HIGH 7.3 CVE-2026-1687 A weakness has been identified in Tenda HG10 US_HG7_HG9_HG10re_300001138_en_xpon. Impacted is an unknown function of the file /boaform/formSamba of t… Hg10 Firmware No fix yet Fix from $1,9502026-01-30 HIGH 8.8 CVE-2026-1638 A security flaw has been discovered in Tenda AC21 1.1.1.1/1.dmzip/16.03.08.16. The impacted element is the function mDMZSetCfg of the file /goform/mD… Ac21 Firmware Mitigation only Fix from $1,9502026-01-30 HIGH 8.8 CVE-2026-1637 A vulnerability was identified in Tenda AC21 16.03.08.16. The affected element is the function fromAdvSetMacMtuWan of the file /goform/AdvSetMacMtuWa… Ac21 Firmware Mitigation only Fix from $1,9502026-01-29 HIGH 8.1 CVE-2026-1610 A vulnerability was found in Tenda AX12 Pro V2 16.03.49.24_cn. Affected by this issue is some unknown functionality of the component Telnet Service. … Ax12 Pro Firmware Mitigation only Fix from $1,9502026-01-29 CRITICAL 9.8 CVE-2026-1420 A flaw has been found in Tenda AC23 16.03.07.52. This impacts an unknown function of the file /goform/WifiExtraSet. This manipulation of the argument… Ac23 Firmware Mitigation only Fix from $2,3002026-01-26 CRITICAL 9.8 CVE-2025-69764 Tenda AX3 firmware v16.03.12.11 contains a stack-based buffer overflow in the formGetIptv function due to improper handling of the stbpvid stack buff… Ax3 Firmware Mitigation only Fix from $2,3002026-01-22 HIGH 8.8 CVE-2026-1329 A flaw has been found in Tenda AX1803 1.0.0.1. The affected element is the function fromGetWifiGuestBasic of the file /goform/WifiGuestSet. Executing… Ax1803 Firmware No fix yet Fix from $1,9502026-01-22 CRITICAL 9.8 CVE-2025-69762 Tenda AX3 firmware v16.03.12.11 contains a stack overflow in formSetIptv via the list parameter, which can cause memory corruption and enable remote … Ax3 Firmware Mitigation only Fix from $2,3002026-01-21 CRITICAL 9.8 CVE-2025-69763 Tenda AX3 firmware v16.03.12.11 contains a stack overflow in formSetIptv via the vlanId parameter, which can cause memory corruption and enable remot… Ax3 Firmware Mitigation only Fix from $2,3002026-01-21 CRITICAL 9.8 CVE-2025-69766 Tenda AX3 firmware v16.03.12.11 contains a stack-based buffer overflow in the formGetIptv function due to improper handling of the citytag stack buff… Ax3 Firmware Mitigation only Fix from $2,3002026-01-21 HIGH 7.5 CVE-2021-47802 Tenda D151 and D301 routers contain an unauthenticated configuration download vulnerability that allows remote attackers to retrieve router configura… D301 Firmware No fix yet Fix from $1,9502026-01-21 HIGH 7.5 CVE-2025-70648 Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow in the security_5g parameter of the sub_727F4 function. This vulnerability allows at… Ax1803 Firmware No fix yet Fix from $1,9502026-01-21 HIGH 7.5 CVE-2025-70644 Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the time parameter of the sub_60CFC function. This vulnerability allows attacker… Ax1806 Firmware No fix yet Fix from $1,9502026-01-21 HIGH 7.5 CVE-2025-70646 Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow in the security parameter of the sub_72290 function. This vulnerability allows attac… Ax1803 Firmware No fix yet Fix from $1,9502026-01-21 HIGH 7.5 CVE-2025-70645 Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the deviceList parameter of the formSetWifiMacFilterCfg function. This vulnerabi… Ax1806 Firmware No fix yet Fix from $1,9502026-01-21 HIGH 7.5 CVE-2025-70650 Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the deviceList parameter of the formSetMacFilterCfg function. This vulnerability… Ax1806 Firmware No fix yet Fix from $1,9502026-01-21 HIGH 7.5 CVE-2025-70651 Tenda AX-1803 v1.0.0.1 was discovered to contain a stack overflow in the ssid parameter of the form_fast_setting_wifi_set function. This vulnerabilit… Ax1803 Firmware No fix yet Fix from $1,9502026-01-21 HIGH 7.5 CVE-2025-70746 Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the timeZone parameter of the fromSetSysTime function. This vulnerability allows… Ax1806 Firmware No fix yet Fix from $1,9502026-01-16 HIGH 7.5 CVE-2025-71020 Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the security parameter of the sub_4C408 function. This vulnerability allows atta… Ax1806 Firmware No fix yet Fix from $1,9502026-01-16 HIGH 7.5 CVE-2025-70656 Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the mac parameter of the sub_65B5C function. This vulnerability allows attackers… Ax1806 Firmware No fix yet Fix from $1,9502026-01-15 HIGH 7.5 CVE-2025-70744 Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the cloneType parameter of the sub_65B5C function. This vulnerability allows att… Ax1806 Firmware No fix yet Fix from $1,9502026-01-15 HIGH 7.5 CVE-2025-71019 Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the wanSpeed parameter of the sub_65B5C function. This vulnerability allows atta… Ax1806 Firmware No fix yet Fix from $1,9502026-01-15 HIGH 7.5 CVE-2025-70747 Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the serviceName parameter of the sub_65A28 function. This vulnerability allows a… Ax1806 Firmware No fix yet Fix from $1,9502026-01-14 HIGH 7.5 CVE-2025-71021 Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the serverName parameter of the sub_65A28 function. This vulnerability allows at… Ax1806 Firmware No fix yet Fix from $1,9502026-01-14 HIGH 7.5 CVE-2025-70753 Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the security_5g parameter of the sub_4CA50 function. This vulnerability allows a… Ax1806 Firmware No fix yet Fix from $1,9502026-01-13 HIGH 7.5 CVE-2025-71023 Tenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow in the mac2 parameter of the fromAdvSetMacMtuWan function. This vulnerability a… Ax3 Firmware No fix yet Fix from $1,9502026-01-13 HIGH 7.5 CVE-2025-71024 Tenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow in the serviceName2 parameter of the fromAdvSetMacMtuWan function. This vulnera… Ax3 Firmware No fix yet Fix from $1,9502026-01-13