Browse CVEs

CRITICAL 9.8 CVE-2026-1420 A flaw has been found in Tenda AC23 16.03.07.52. This impacts an unknown function of the file /goform/WifiExtraSet. This manipulation of the argument… Ac23 Firmware Mitigation only Fix from $2,3002026-01-26 CRITICAL 9.8 CVE-2025-69764 Tenda AX3 firmware v16.03.12.11 contains a stack-based buffer overflow in the formGetIptv function due to improper handling of the stbpvid stack buff… Ax3 Firmware Mitigation only Fix from $2,3002026-01-22 HIGH 8.8 CVE-2026-1329 A flaw has been found in Tenda AX1803 1.0.0.1. The affected element is the function fromGetWifiGuestBasic of the file /goform/WifiGuestSet. Executing… Ax1803 Firmware No fix yet Fix from $1,9502026-01-22 CRITICAL 9.8 CVE-2025-69762 Tenda AX3 firmware v16.03.12.11 contains a stack overflow in formSetIptv via the list parameter, which can cause memory corruption and enable remote … Ax3 Firmware Mitigation only Fix from $2,3002026-01-21 CRITICAL 9.8 CVE-2025-69763 Tenda AX3 firmware v16.03.12.11 contains a stack overflow in formSetIptv via the vlanId parameter, which can cause memory corruption and enable remot… Ax3 Firmware Mitigation only Fix from $2,3002026-01-21 CRITICAL 9.8 CVE-2025-69766 Tenda AX3 firmware v16.03.12.11 contains a stack-based buffer overflow in the formGetIptv function due to improper handling of the citytag stack buff… Ax3 Firmware Mitigation only Fix from $2,3002026-01-21 HIGH 7.5 CVE-2021-47802 Tenda D151 and D301 routers contain an unauthenticated configuration download vulnerability that allows remote attackers to retrieve router configura… D301 Firmware No fix yet Fix from $1,9502026-01-21 HIGH 7.5 CVE-2025-70648 Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow in the security_5g parameter of the sub_727F4 function. This vulnerability allows at… Ax1803 Firmware No fix yet Fix from $1,9502026-01-21 HIGH 7.5 CVE-2025-70644 Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the time parameter of the sub_60CFC function. This vulnerability allows attacker… Ax1806 Firmware No fix yet Fix from $1,9502026-01-21 HIGH 7.5 CVE-2025-70646 Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow in the security parameter of the sub_72290 function. This vulnerability allows attac… Ax1803 Firmware No fix yet Fix from $1,9502026-01-21 HIGH 7.5 CVE-2025-70645 Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the deviceList parameter of the formSetWifiMacFilterCfg function. This vulnerabi… Ax1806 Firmware No fix yet Fix from $1,9502026-01-21 HIGH 7.5 CVE-2025-70650 Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the deviceList parameter of the formSetMacFilterCfg function. This vulnerability… Ax1806 Firmware No fix yet Fix from $1,9502026-01-21 HIGH 7.5 CVE-2025-70651 Tenda AX-1803 v1.0.0.1 was discovered to contain a stack overflow in the ssid parameter of the form_fast_setting_wifi_set function. This vulnerabilit… Ax1803 Firmware No fix yet Fix from $1,9502026-01-21 HIGH 7.5 CVE-2025-70746 Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the timeZone parameter of the fromSetSysTime function. This vulnerability allows… Ax1806 Firmware No fix yet Fix from $1,9502026-01-16 HIGH 7.5 CVE-2025-71020 Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the security parameter of the sub_4C408 function. This vulnerability allows atta… Ax1806 Firmware No fix yet Fix from $1,9502026-01-16 HIGH 7.5 CVE-2025-70656 Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the mac parameter of the sub_65B5C function. This vulnerability allows attackers… Ax1806 Firmware No fix yet Fix from $1,9502026-01-15 HIGH 7.5 CVE-2025-70744 Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the cloneType parameter of the sub_65B5C function. This vulnerability allows att… Ax1806 Firmware No fix yet Fix from $1,9502026-01-15 HIGH 7.5 CVE-2025-71019 Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the wanSpeed parameter of the sub_65B5C function. This vulnerability allows atta… Ax1806 Firmware No fix yet Fix from $1,9502026-01-15 HIGH 7.5 CVE-2025-70747 Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the serviceName parameter of the sub_65A28 function. This vulnerability allows a… Ax1806 Firmware No fix yet Fix from $1,9502026-01-14 HIGH 7.5 CVE-2025-71021 Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the serverName parameter of the sub_65A28 function. This vulnerability allows at… Ax1806 Firmware No fix yet Fix from $1,9502026-01-14 HIGH 7.5 CVE-2025-70753 Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the security_5g parameter of the sub_4CA50 function. This vulnerability allows a… Ax1806 Firmware No fix yet Fix from $1,9502026-01-13 HIGH 7.5 CVE-2025-71023 Tenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow in the mac2 parameter of the fromAdvSetMacMtuWan function. This vulnerability a… Ax3 Firmware No fix yet Fix from $1,9502026-01-13 HIGH 7.5 CVE-2025-71024 Tenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow in the serviceName2 parameter of the fromAdvSetMacMtuWan function. This vulnera… Ax3 Firmware No fix yet Fix from $1,9502026-01-13 HIGH 7.5 CVE-2025-71025 Tenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow in the cloneType2 parameter of the fromAdvSetMacMtuWan function. This vulnerabi… Ax3 Firmware No fix yet Fix from $1,9502026-01-13 HIGH 7.5 CVE-2025-71026 Tenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow in the wanSpeed2 parameter of the fromAdvSetMacMtuWan function. This vulnerabil… Ax3 Firmware No fix yet Fix from $1,9502026-01-13 HIGH 7.5 CVE-2025-71027 Tenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow in the wanMTU2 parameter of the fromAdvSetMacMtuWan function. This vulnerabilit… Ax3 Firmware No fix yet Fix from $1,9502026-01-13 CRITICAL 9.8 CVE-2026-0640 A weakness has been identified in Tenda AC23 16.03.07.52. This affects the function sscanf of the file /goform/PowerSaveSet. Executing a manipulation… Ac23 Firmware Mitigation only Fix from $2,3002026-01-06 CRITICAL 9.8 CVE-2026-0581EPSS 9% A vulnerability was determined in Tenda AC1206 15.03.06.23. Affected by this issue is the function formBehaviorManager of the file /goform/BehaviorMa… Ac1206 Firmware Mitigation only Fix from $2,3002026-01-05 HIGH 8.8 CVE-2025-15356 A vulnerability has been found in Tenda AC20 up to 16.03.08.12. The impacted element is the function sscanf of the file /goform/PowerSaveSet. The man… Ac20 Firmware after 16.03.08.12 Fix from $1,9502025-12-30 CRITICAL 9.8 CVE-2025-15255 A vulnerability was determined in Tenda W6-S 1.0.0.4(510). This impacts an unknown function of the file /bin/httpd of the component R7websSsecurityHa… W6 S Firmware Mitigation only Fix from $2,3002025-12-30