tenda Vulnerability Advisory Catalog

Total 1,844 security vulnerabilities recorded for tenda software and firmware.

← Back to All Vendors
Component: f453_firmware

A security vulnerability has been detected in Tenda F453 1.0.0.3. Affected by this vulnerability is the function formWrlExtraSet of the file /goform/W...

📅 2026-03-08
CVSS 8.8 Dossier →
Component: f453_firmware

A security vulnerability has been detected in Tenda F453 1.0.0.3. This affects the function strcpy of the file /goform/exeCommand. The manipulation of...

📅 2026-03-08
CVSS 8.8 Dossier →
Component: f453_firmware

A vulnerability was identified in Tenda F453 1.0.0.3/3.As. Impacted is the function fromPptpUserAdd of the file /goform/PPTPDClient. Such manipulation...

📅 2026-03-08
CVSS 8.8 Dossier →
Component: f453_firmware

A vulnerability was determined in Tenda F453 1.0.0.3/1.If. This issue affects the function fromSetCfm of the file /goform/setcfm. This manipulation of...

📅 2026-03-08
CVSS 8.8 Dossier →
Component: f453_firmware

A vulnerability was found in Tenda F453 1.0.0.3. This vulnerability affects the function sub_3C6C0 of the file /goform/QuickIndex. The manipulation of...

📅 2026-03-08
CVSS 8.8 Dossier →
Component: f453_firmware

A vulnerability has been found in Tenda F453 1.0.0.3. This affects the function fromwebExcptypemanFilter of the file /goform/webExcptypemanFilter. The...

📅 2026-03-08
CVSS 8.8 Dossier →
Component: f451_firmware

A vulnerability was identified in Tenda FH451 1.0.0.9. Affected by this vulnerability is the function formQuickIndex of the file /goform/QuickIndex. S...

📅 2026-03-07
CVSS 8.8 Dossier →
Component: fh451_firmware

A vulnerability was determined in Tenda FH451 1.0.0.9. Affected is the function sub_3C434 of the file /goform/AdvSetWan. This manipulation of the argu...

📅 2026-03-07
CVSS 8.8 Dossier →
Component: fh451_firmware

A vulnerability was found in Tenda FH451 1.0.0.9. This impacts the function fromSetCfm of the file /goform/setcfm. The manipulation of the argument fu...

📅 2026-03-07
CVSS 8.8 Dossier →
Component: ax3_firmware

Tenda AX3 firmware v16.03.12.11 contains a stack overflow in formGetIptv function and the list parameter, which can cause memory corruption and enable...

📅 2026-03-03
CVSS 7.5 Dossier →
CVE-2026-24103 CRITICAL
Component: ac15_firmware

A buffer overflow vulnerability was discovered in goform/formSetMacFilterCfg in Tenda AC15V1.0 V15.03.05.18_multi....

📅 2026-03-03
CVSS 9.8 Dossier →
CVE-2026-24105 CRITICAL
Component: ac15_firmware

An issue was discovered in goform/formsetUsbUnload in Tenda AC15V1.0 V15.03.05.18_multi. The value of `v1` was not checked, potentially leading to a c...

📅 2026-03-02
CVSS 9.8 Dossier →
Component: ac6_firmware

An issue was discovered in /goform/WifiWpsStart in Tenda AC6V2.0 V15.03.06.23_multi. The index and mode are controllable. If the conditions are met to...

📅 2026-03-02
CVSS 7.5 Dossier →
CVE-2026-24112 CRITICAL
Component: w20e_firmware

An issue was discovered in Tenda W20E V4.0br_V15.11.0.6. Attackers may exploit the vulnerability by specifying the value of `userInfo`. When `userInfo...

📅 2026-03-02
CVSS 9.8 Dossier →
CVE-2026-24110 CRITICAL
Component: w20e_firmware

An issue was discovered in Tenda W20E V4.0br_V15.11.0.6. Attackers may send overly long `addDhcpRules` data. When these rules enter the `addDhcpRule` ...

📅 2026-03-02
CVSS 9.8 Dossier →
CVE-2026-24101 CRITICAL
Component: ac15_firmware

An issue was discovered in goform/formSetIptv in Tenda AC15V1.0 V15.03.05.18_multi. When the condition is met, `s1_1` will be passed into sub_B0488, c...

📅 2026-03-02
CVSS 9.8 Dossier →
CVE-2026-24115 CRITICAL
Component: w20e_firmware

An issue was discovered in Tenda W20E V4.0br_V15.11.0.6. Failure to validate the sizes of `gstup` and `gstdwn` before concatenating them into `gstrule...

📅 2026-03-02
CVSS 9.8 Dossier →
CVE-2026-24114 CRITICAL
Component: w20e_firmware

An issue was discovered in Tenda W20E V4.0br_V15.11.0.6. Failure to validate `pPortMapIndex` may lead to buffer overflows when using `strcpy`....

📅 2026-03-02
CVSS 9.8 Dossier →
CVE-2026-24113 CRITICAL
Component: w20e_firmware

An issue was discovered in Tenda W20E V4.0br_V15.11.0.6. Attackers may exploit the vulnerability by controlling the value of `nptr`. When this value i...

📅 2026-03-02
CVSS 9.8 Dossier →
CVE-2026-24111 CRITICAL
Component: w20e_firmware

An issue was discovered in Tenda W20E V4.0br_V15.11.0.6. Attackers may exploit the vulnerability by specifying the value of `userInfo`. When `userInfo...

📅 2026-03-02
CVSS 9.8 Dossier →
CVE-2026-24109 CRITICAL
Component: w20e_firmware

An issue was discovered in Tenda W20E V4.0br_V15.11.0.6. Attackers may exploit the vulnerability by controlling the value of `picName`. When this valu...

📅 2026-03-02
CVSS 9.8 Dossier →
CVE-2026-24108 CRITICAL
Component: w20e_firmware

An issue was discovered in Tenda W20E V4.0br_V15.11.0.6. Attackers may exploit the vulnerability by controlling the value of `nptr`. When this value i...

📅 2026-03-02
CVSS 9.8 Dossier →
CVE-2026-24107 CRITICAL
Component: w20e_firmware

An issue was discovered in Tenda W20E V4.0br_V15.11.0.6. Failure to validate the value of `usbPartitionName`, which is directly used in `doSystemCmd`,...

📅 2026-03-02
CVSS 9.8 Dossier →
Component: ac15_firmware

A security flaw has been discovered in Tenda AC15 up to 15.13.07.13. Affected by this issue is some unknown functionality of the file /goform/TextEdit...

📅 2026-03-02
CVSS 8.8 Dossier →
Page 7 of 77 (1,844 Total Records)