tenda Vulnerability Advisory Catalog

Total 1,844 security vulnerabilities recorded for tenda software and firmware.

← Back to All Vendors
Component: w30e_firmware

Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.19(5037) display stored user account passwords in plaintext within the administr...

📅 2026-01-26
CVSS 6.5 Dossier →
Component: w30e_firmware

Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.19(5037) disclose sensitive account credentials in cleartext within HTTP respons...

📅 2026-01-26
CVSS 7.5 Dossier →
CVE-2026-24429 CRITICAL
Component: w30e_firmware

Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.19(5037) ship with a predefined default password for a built-in authentication a...

📅 2026-01-26
CVSS 9.8 Dossier →
Component: w30e_firmware

Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.19(5037) contain an authorization flaw in the user management API that allows a ...

📅 2026-01-26
CVSS 8.8 Dossier →
Component: ac23_firmware

A flaw has been found in Tenda AC23 16.03.07.52. This impacts an unknown function of the file /goform/WifiExtraSet. This manipulation of the argument ...

📅 2026-01-26
CVSS 8.8 Dossier →
CVE-2025-69764 CRITICAL
Component: ax3_firmware

Tenda AX3 firmware v16.03.12.11 contains a stack-based buffer overflow in the formGetIptv function due to improper handling of the stbpvid stack buffe...

📅 2026-01-22
CVSS 9.8 Dossier →
Component: ax1803_firmware

A flaw has been found in Tenda AX1803 1.0.0.1. The affected element is the function fromGetWifiGuestBasic of the file /goform/WifiGuestSet. Executing ...

📅 2026-01-22
CVSS 8.8 Dossier →
CVE-2025-69766 CRITICAL
Component: ax3_firmware

Tenda AX3 firmware v16.03.12.11 contains a stack-based buffer overflow in the formGetIptv function due to improper handling of the citytag stack buffe...

📅 2026-01-21
CVSS 9.8 Dossier →
CVE-2025-69763 CRITICAL
Component: ax3_firmware

Tenda AX3 firmware v16.03.12.11 contains a stack overflow in formSetIptv via the vlanId parameter, which can cause memory corruption and enable remote...

📅 2026-01-21
CVSS 9.8 Dossier →
CVE-2025-69762 CRITICAL
Component: ax3_firmware

Tenda AX3 firmware v16.03.12.11 contains a stack overflow in formSetIptv via the list parameter, which can cause memory corruption and enable remote c...

📅 2026-01-21
CVSS 9.8 Dossier →
Component: d301_firmware

Tenda D151 and D301 routers contain an unauthenticated configuration download vulnerability that allows remote attackers to retrieve router configurat...

📅 2026-01-21
CVSS 7.5 Dossier →
Component: ax1803_firmware

Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow in the security_5g parameter of the sub_727F4 function. This vulnerability allows att...

📅 2026-01-21
CVSS 7.5 Dossier →
Component: ax1803_firmware

Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow in the security parameter of the sub_72290 function. This vulnerability allows attack...

📅 2026-01-21
CVSS 7.5 Dossier →
Component: ax1806_firmware

Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the time parameter of the sub_60CFC function. This vulnerability allows attackers...

📅 2026-01-21
CVSS 7.5 Dossier →
Component: ax1803_firmware

Tenda AX-1803 v1.0.0.1 was discovered to contain a stack overflow in the ssid parameter of the form_fast_setting_wifi_set function. This vulnerability...

📅 2026-01-21
CVSS 7.5 Dossier →
Component: ax1806_firmware

Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the deviceList parameter of the formSetMacFilterCfg function. This vulnerability ...

📅 2026-01-21
CVSS 7.5 Dossier →
Component: ax1806_firmware

Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the deviceList parameter of the formSetWifiMacFilterCfg function. This vulnerabil...

📅 2026-01-21
CVSS 7.5 Dossier →
Component: ax1806_firmware

Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the security parameter of the sub_4C408 function. This vulnerability allows attac...

📅 2026-01-16
CVSS 7.5 Dossier →
Component: ax1806_firmware

Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the timeZone parameter of the fromSetSysTime function. This vulnerability allows ...

📅 2026-01-16
CVSS 7.5 Dossier →
Component: ax1806_firmware

Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the mac parameter of the sub_65B5C function. This vulnerability allows attackers ...

📅 2026-01-15
CVSS 7.5 Dossier →
Component: ax1806_firmware

Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the wanSpeed parameter of the sub_65B5C function. This vulnerability allows attac...

📅 2026-01-15
CVSS 7.5 Dossier →
Component: ax1806_firmware

Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the cloneType parameter of the sub_65B5C function. This vulnerability allows atta...

📅 2026-01-15
CVSS 7.5 Dossier →
Component: ax1806_firmware

Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the serverName parameter of the sub_65A28 function. This vulnerability allows att...

📅 2026-01-14
CVSS 7.5 Dossier →
Component: ax1806_firmware

Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the serviceName parameter of the sub_65A28 function. This vulnerability allows at...

📅 2026-01-14
CVSS 7.5 Dossier →
Page 11 of 77 (1,844 Total Records)