Vulnerability index

Browse CVEs

1,819 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Ac18 Firmware HIGH 7.5
CVE-2025-60662

Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the wanSpeed parameter in the fromAdvSetMacMtuWan function.

No fix yet
Fix from $1,950 2025-10-02
Ac18 Firmware HIGH 8.8
CVE-2025-11123

A flaw has been found in Tenda AC18 15.03.05.19. This impacts an unknown function of the file /goform/saveAutoQos. This manipulation of the argument …

No fix yet
Fix from $1,950 2025-09-28
Ac18 Firmware HIGH 8.8
CVE-2025-11122

A vulnerability was detected in Tenda AC18 15.03.05.19. This affects an unknown function of the file /goform/WizardHandle. The manipulation of the ar…

No fix yet
Fix from $1,950 2025-09-28
Ac18 Firmware HIGH 8.8
CVE-2025-11121

A security vulnerability has been detected in Tenda AC18 15.03.05.19. The impacted element is an unknown function of the file /goform/AdvSetLanip. Th…

No fix yet
Fix from $1,950 2025-09-28
Ac18 Firmware HIGH 8.8
CVE-2025-11120

A weakness has been identified in Tenda AC8 16.03.34.06. The affected element is the function formSetServerConfig of the file /goform/SetServerConfig…

No fix yet
Fix from $1,950 2025-09-28
Ch22 Firmware HIGH 8.8
CVE-2025-11117

A vulnerability was determined in Tenda CH22 1.0.0.1. This vulnerability affects the function formWrlExtraGet of the file /goform/GstDhcpSetSer. This…

No fix yet
Fix from $1,950 2025-09-28
Ac21 Firmware HIGH 8.8
CVE-2025-11091

A security flaw has been discovered in Tenda AC21 up to 16.03.08.16. Affected by this vulnerability is the function sscanf of the file /goform/SetSta…

Fix: after 16.03.08.16
Fix from $1,950 2025-09-28
Ac9 Firmware HIGH 7.5
CVE-2025-57638

Buffer overflow vulnerability in Tenda AC9 1.0 via the user supplied sys.vendor configuration value.

No fix yet
Fix from $1,950 2025-09-23
Ac9 Firmware MEDIUM 6.5
CVE-2025-57639

OS Command injection vulnerability in Tenda AC9 1.0 was discovered to contain a command injection vulnerability via the usb.samba.guest.user paramete…

No fix yet
Fix from $1,600 2025-09-23
Ac21 Firmware HIGH 8.8
CVE-2025-10838

A vulnerability was identified in Tenda AC21 16.03.08.16. The affected element is the function sub_45BB10 of the file /goform/WifiExtraSet. The manip…

Fix: after 16.03.08.16
Fix from $1,950 2025-09-23
Ac20 Firmware HIGH 8.8
CVE-2025-10815

A vulnerability was identified in Tenda AC20 up to 16.03.08.12. Affected by this issue is the function strcpy of the file /goform/SetPptpServerCfg of…

Fix: after 16.03.08.12
Fix from $1,950 2025-09-22
Ac23 Firmware HIGH 8.8
CVE-2025-10803

A vulnerability has been found in Tenda AC23 up to 16.03.07.52. Affected by this vulnerability is the function sscanf of the file /goform/SetPptpServ…

Fix: after 16.03.07.52
Fix from $1,950 2025-09-22
Ac6 Firmware MEDIUM 6.5
CVE-2025-57296

Tenda AC6 router firmware 15.03.05.19 contains a command injection vulnerability in the formSetIptv function, which processes requests to the /goform…

No fix yet
Fix from $1,600 2025-09-19
Ac6 Firmware HIGH 7.7
CVE-2025-57528

An issue was discovered in Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01 allowing attackers to cause a denial of service via the funcname, funcpara1…

No fix yet
Fix from $1,950 2025-09-19
Ac9 Firmware HIGH 8.8
CVE-2025-10443

A vulnerability was identified in Tenda AC9 and AC15 15.03.05.14/15.03.05.18. This vulnerability affects the function formexeCommand of the file /gof…

No fix yet
Fix from $1,950 2025-09-15
Ac9 Firmware HIGH 8.8
CVE-2025-10442EPSS 8%

A vulnerability was determined in Tenda AC9 and AC15 15.03.05.14. This affects the function formexeCommand of the file /goform/exeCommand. This manip…

No fix yet
Fix from $1,950 2025-09-15
Ac1206 Firmware CRITICAL 9.8
CVE-2025-10432

A vulnerability was found in Tenda AC1206 15.03.06.23. This vulnerability affects the function check_param_changed of the file /goform/AdvSetMacMtuWa…

Mitigation only
Fix from $2,300 2025-09-15
F3 Firmware MEDIUM 5.6
CVE-2025-57569

Tenda F3 V12.01.01.48_multi and after is vulnerable to Buffer Overflow via the portList parameter in /goform/setNAT.

Mitigation only
Fix from $1,600 2025-09-10
F3 Firmware MEDIUM 5.6
CVE-2025-57570

Tenda F3 V12.01.01.48_multi and after is vulnerable to Buffer Overflow via the QosList parameter in goform/setQoS.

Mitigation only
Fix from $1,600 2025-09-10
F3 Firmware MEDIUM 5.6
CVE-2025-57571

Tenda F3 V12.01.01.48_multi and after is vulnerable to Buffer Overflow. via the macFilterList parameter in goform/setNAT.

Mitigation only
Fix from $1,600 2025-09-10
F3 Firmware MEDIUM 5.6
CVE-2025-57572

Tenda F3 V12.01.01.48_multi and after is vulnerable to Buffer Overflow via the onlineList parameter in goform/setParentControl.

Mitigation only
Fix from $1,600 2025-09-10
F3 Firmware MEDIUM 5.6
CVE-2025-57573

Tenda F3 V12.01.01.48_multi and after is vulnerable to Buffer Overflow via the wifiTimeClose parameter in goform/setWifi.

Mitigation only
Fix from $1,600 2025-09-10
G3 Firmware HIGH 7.5
CVE-2025-57060

Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the rules parameter in the dns_forward_rule_store function. This vulnerabil…

Fix: after 15.11.0.17
Fix from $1,950 2025-09-09
W30e Firmware HIGH 7.5
CVE-2025-57086

Tenda W30E V16.01.0.19 (5037) was discovered to contain a stack overflow in the String parameter in the formDeleteMeshNode function. This vulnerabili…

Fix: after 16.01.0.19
Fix from $1,950 2025-09-09
W30e Firmware CRITICAL 9.8
CVE-2025-57085

Tenda W30E V16.01.0.19 (5037) was discovered to contain a stack overflow in the v17 parameter in the UploadCfg function. This vulnerability allows at…

Fix: after 16.01.0.19
Fix from $2,300 2025-09-09
G3 Firmware HIGH 7.5
CVE-2025-57078

Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the pppoeServerWhiteMacIndex parameter in the formModifyPppAuthWhiteMac fun…

Fix: after 15.11.0.17
Fix from $1,950 2025-09-09
W30e Firmware HIGH 7.5
CVE-2025-57087

Tenda W30E V16.01.0.19 (5037) was discovered to contain a stack overflow in the countryCode parameter in the werlessAdvancedSet function. This vulner…

Fix: after 16.01.0.19
Fix from $1,950 2025-09-09
G3 Firmware HIGH 7.5
CVE-2025-57063

Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the portMappingIndex parameter in the formDelPortMapping function. This vul…

Fix: after 15.11.0.17
Fix from $1,950 2025-09-09
G3 Firmware HIGH 7.5
CVE-2025-57064

Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the bindDhcpIndex parameter in the modifyDhcpRule function. This vulnerabil…

Fix: after 15.11.0.17
Fix from $1,950 2025-09-09
G3 Firmware HIGH 7.5
CVE-2025-57069

Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the pPppUser parameter in the getsinglepppuser function. This vulnerability…

Fix: after 15.11.0.17
Fix from $1,950 2025-09-09