Vulnerability index

Browse CVEs

1,819 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Wh450 Firmware CRITICAL 9.8
CVE-2025-15006

A weakness has been identified in Tenda WH450 1.0.0.18. Affected by this vulnerability is an unknown functionality of the file /goform/CheckTools of …

Mitigation only
Fix from $2,300 2025-12-22
Wh450 Firmware CRITICAL 9.8
CVE-2025-15007

A security vulnerability has been detected in Tenda WH450 1.0.0.18. Affected by this issue is some unknown functionality of the file /goform/L7Im of …

Mitigation only
Fix from $2,300 2025-12-22
Fh1201 Firmware HIGH 8.8
CVE-2025-14995

A vulnerability has been found in Tenda FH1201 1.2.0.14(408). Affected is the function sprintf of the file /goform/SetIpBind. Such manipulation of th…

No fix yet
Fix from $1,950 2025-12-21
Fh1201 Firmware HIGH 8.8
CVE-2025-14994

A flaw has been found in Tenda FH1201 and FH1206 1.2.0.14(408)/1.2.0.8(8155). This impacts the function strcat of the file /goform/webtypelibrary of …

No fix yet
Fix from $1,950 2025-12-21
Ac18 Firmware HIGH 8.8
CVE-2025-14993

A vulnerability was detected in Tenda AC18 15.03.05.05. This affects the function sprintf of the file /goform/SetDlnaCfg of the component HTTP Reques…

No fix yet
Fix from $1,950 2025-12-21
Ac18 Firmware HIGH 8.8
CVE-2025-14992

A security vulnerability has been detected in Tenda AC18 15.03.05.05. The impacted element is the function strcpy of the file /goform/GetParentContro…

No fix yet
Fix from $1,950 2025-12-21
Wh450 Firmware CRITICAL 9.8
CVE-2025-14879EPSS 7%

A weakness has been identified in Tenda WH450 1.0.0.18. Affected is an unknown function of the file /goform/onSSIDChange of the component HTTP Reques…

Mitigation only
Fix from $2,300 2025-12-18
Wh450 Firmware CRITICAL 9.8
CVE-2025-14878

A security flaw has been discovered in Tenda WH450 1.0.0.18. This impacts an unknown function of the file /goform/wirelessRestart of the component HT…

Mitigation only
Fix from $2,300 2025-12-18
Ac10 Firmware CRITICAL 9.8
CVE-2025-67073

A Buffer overflow vulnerability in function fromAdvSetMacMtuWan of bin httpd in Tenda AC10V4.0 V16.03.10.20 allows remote attackers to cause denial o…

Mitigation only
Fix from $2,300 2025-12-17
Ac10 Firmware MEDIUM 6.5
CVE-2025-67074

A Buffer overflow vulnerability in function fromAdvSetMacMtuWan of bin httpd in Tenda AC10V4.0 V16.03.10.20 allows remote attackers to cause denial o…

No fix yet
Fix from $1,600 2025-12-17
Wh450 Firmware CRITICAL 9.8
CVE-2025-14665

A security flaw has been discovered in Tenda WH450 1.0.0.18. Impacted is an unknown function of the file /goform/DhcpListClient of the component HTTP…

Mitigation only
Fix from $2,300 2025-12-14
Ac20 Firmware HIGH 8.8
CVE-2025-14656

A weakness has been identified in Tenda AC20 16.03.08.12. This affects the function httpd of the file /goform/openSchedWifi. Executing a manipulation…

No fix yet
Fix from $1,950 2025-12-14
Ac20 Firmware HIGH 8.8
CVE-2025-14655

A security flaw has been discovered in Tenda AC20 16.03.08.12. The impacted element is the function formSetRebootTimer of the file /goform/SetSysAuto…

No fix yet
Fix from $1,950 2025-12-14
Ac20 Firmware HIGH 8.8
CVE-2025-14654

A vulnerability was identified in Tenda AC20 16.03.08.12. The affected element is the function formSetPPTPUserList of the file /goform/setPptpUserLis…

No fix yet
Fix from $1,950 2025-12-14
Ch22 Firmware HIGH 8.8
CVE-2025-14526

A security flaw has been discovered in Tenda CH22 1.0.0.1. This affects the function frmL7ImForm of the file /goform/L7Im. Performing a manipulation …

No fix yet
Fix from $1,950 2025-12-11
Ac9 Firmware HIGH 7.5
CVE-2025-14286

A vulnerability was determined in Tenda AC9 15.03.05.14_multi. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/Downlo…

No fix yet
Fix from $1,950 2025-12-09
Ax3 Firmware MEDIUM 6.5
CVE-2025-65804

Tenda AX3 v16.03.12.11 contains a stack overflow in formSetIptv via the iptvType parameter, which can cause memory corruption and enable remote code …

No fix yet
Fix from $1,600 2025-12-08
Ac21 Firmware CRITICAL 9.8
CVE-2025-13445

A flaw has been found in Tenda AC21 16.03.08.16. This affects an unknown part of the file /goform/SetIpMacBind. Executing a manipulation of the argum…

Mitigation only
Fix from $2,300 2025-11-20
Ac21 Firmware CRITICAL 9.8
CVE-2025-13446

A vulnerability has been found in Tenda AC21 16.03.08.16. This vulnerability affects unknown code of the file /goform/SetSysTimeCfg. The manipulation…

Mitigation only
Fix from $2,300 2025-11-20
Ch22 Firmware CRITICAL 9.8
CVE-2025-13400

A vulnerability was detected in Tenda CH22 1.0.0.1. Affected is the function formWrlExtraGet of the file /goform/WrlExtraGet. Performing a manipulati…

Mitigation only
Fix from $2,300 2025-11-19
Ch22 Firmware HIGH 8.8
CVE-2025-13288

A security vulnerability has been detected in Tenda CH22 1.0.0.1. This impacts the function fromPptpUserSetting of the file /goform/PPTPUserSetting. …

No fix yet
Fix from $1,950 2025-11-17
Ac20 Firmware HIGH 8.8
CVE-2025-13258

A vulnerability was detected in Tenda AC20 up to 16.03.08.12. The impacted element is an unknown function of the file /goform/WifiExtraSet. The manip…

No fix yet
Fix from $1,950 2025-11-17
Ac15 Firmware CRITICAL 9.8
CVE-2025-63666

Tenda AC15 v15.03.05.18_multi) issues an authentication cookie that exposes the account password hash to the client and uses a short, low-entropy suf…

Mitigation only
Fix from $2,300 2025-11-12
Ax3 Firmware HIGH 7.5
CVE-2025-63149

Tenda AX3 V16.03.12.10_CN was discovered to contain a stack overflow in the urls parameter of the get_parentControl_list_Info function. This vulnerab…

No fix yet
Fix from $1,950 2025-11-10
Ac18 Firmware HIGH 8.8
CVE-2025-63835

A stack-based buffer overflow vulnerability was discovered in Tenda AC18 v15.03.05.05_multi. The vulnerability exists in the guestSsid parameter of t…

No fix yet
Fix from $1,950 2025-11-10
Ax1803 Firmware HIGH 7.5
CVE-2025-63457

Tenda AX-1803 v1.0.0.1 was discovered to contain a stack overflow via the wanMTU parameter in the sub_4F55C function. This vulnerability allows attac…

No fix yet
Fix from $1,950 2025-11-10
Ac18 Firmware MEDIUM 5.4
CVE-2025-63834

A stored cross-site scripting (XSS) vulnerability was discovered in Tenda AC18 v15.03.05.05_multi. The vulnerability exists in the ssid parameter of …

No fix yet
Fix from $1,600 2025-11-10
Ax3 Firmware HIGH 7.5
CVE-2025-63147

Tenda AX3 V16.03.12.10_CN was discovered to contain a stack overflow in the deviceId parameter of the saveParentControlInfo function. This vulnerabil…

No fix yet
Fix from $1,950 2025-11-10
Ax3 Firmware HIGH 7.5
CVE-2025-63455

Tenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow via the shareSpeed parameter in the fromSetWifiGusetBasic function. This vulner…

No fix yet
Fix from $1,950 2025-11-10
Ax1803 Firmware HIGH 7.5
CVE-2025-63456

Tenda AX-1803 v1.0.0.1 was discovered to contain a stack overflow via the time parameter in the SetSysTimeCfg function. This vulnerability allows att…

No fix yet
Fix from $1,950 2025-11-10