Tenda Security Vulnerabilities (CVEs)

Track 746 security vulnerabilities affecting Tenda products and software. Get instant email alerts when new CVEs are discovered, automated security monitoring, and patch guidance.

250 Critical
426 High
69 Medium
1 Low
🔔 Get Alerts for Tenda
CVE-2025-11385 8.8

A buffer overflow vulnerability in Tenda AC20 routers allows remote attackers to execute arbitrary code by manipulating the timeZone parameter. This a...

Oct 7, 2025
CVE-2025-11356 8.8

A buffer overflow vulnerability in Tenda AC23 routers allows remote attackers to execute arbitrary code by exploiting improper input validation in the...

Oct 7, 2025
CVE-2025-11328 8.8

This vulnerability in Tenda AC18 routers allows remote attackers to execute arbitrary code via a stack-based buffer overflow in the DDNS configuration...

Oct 6, 2025
CVE-2025-11326 8.8

This CVE describes a stack-based buffer overflow vulnerability in Tenda AC18 routers through manipulation of the wifi_chkHz parameter in the WifiMacFi...

Oct 6, 2025
CVE-2025-11324 8.8

A stack-based buffer overflow vulnerability exists in Tenda AC18 routers via the /goform/setNotUpgrade endpoint. Attackers can remotely execute arbitr...

Oct 6, 2025
CVE-2025-11325 8.8

A stack-based buffer overflow vulnerability exists in Tenda AC18 routers via the /goform/fast_setting_pppoe_set endpoint. Attackers can remotely explo...

Oct 6, 2025
CVE-2025-60663 7.5

This CVE describes a stack overflow vulnerability in Tenda AC18 routers that allows remote attackers to execute arbitrary code or cause denial of serv...

Oct 2, 2025
CVE-2025-60661 5.3

A stack overflow vulnerability in Tenda AC18 routers allows attackers to execute arbitrary code or cause denial of service by sending specially crafte...

Oct 2, 2025
CVE-2025-60660 7.5

A stack overflow vulnerability in Tenda AC18 routers allows attackers to execute arbitrary code by sending specially crafted requests to the vulnerabl...

Oct 2, 2025
CVE-2025-60662 7.5

A stack overflow vulnerability in Tenda AC18 routers allows remote attackers to execute arbitrary code or cause denial of service by sending specially...

Oct 2, 2025
CVE-2025-11122 8.8

A stack-based buffer overflow vulnerability in Tenda AC18 routers allows remote attackers to execute arbitrary code by sending specially crafted reque...

Sep 28, 2025
CVE-2025-11120 8.8

A buffer overflow vulnerability in Tenda AC8 routers allows remote attackers to execute arbitrary code by exploiting the formSetServerConfig function....

Sep 28, 2025
CVE-2025-11117 8.8

A buffer overflow vulnerability in Tenda CH22 router firmware version 1.0.0.1 allows remote attackers to execute arbitrary code or cause denial of ser...

Sep 28, 2025
CVE-2025-11091 8.8

A buffer overflow vulnerability exists in Tenda AC21 routers through firmware version 16.03.08.16. Attackers can remotely exploit this flaw by sending...

Sep 28, 2025
CVE-2025-57639 6.5

This CVE describes an OS command injection vulnerability in Tenda AC9 routers where an attacker can execute arbitrary commands on the device by manipu...

Sep 23, 2025
CVE-2025-10838 8.8

A buffer overflow vulnerability in Tenda AC21 routers allows remote attackers to execute arbitrary code by manipulating the wpapsk_crypto parameter. T...

Sep 23, 2025
CVE-2025-10815 8.8

A buffer overflow vulnerability in Tenda AC20 routers allows remote attackers to execute arbitrary code or cause denial of service by sending speciall...

Sep 22, 2025
CVE-2025-57296 6.5

This CVE describes a command injection vulnerability in Tenda AC6 router firmware that allows attackers to execute arbitrary system commands. The vuln...

Sep 19, 2025
CVE-2025-57528 7.7

This vulnerability in Tenda AC6 routers allows attackers to cause denial of service through buffer overflow in the formSetCfm function. Attackers can ...

Sep 19, 2025
CVE-2025-10443 8.8

A buffer overflow vulnerability in Tenda AC9 and AC15 routers allows remote attackers to execute arbitrary code by sending specially crafted requests ...

Sep 15, 2025
CVE-2025-10442 6.3

This vulnerability allows remote attackers to execute arbitrary operating system commands on Tenda AC9 and AC15 routers through command injection in t...

Sep 15, 2025
CVE-2025-10432 9.8

This vulnerability allows remote attackers to execute arbitrary code on Tenda AC1206 routers via a stack-based buffer overflow in the HTTP request han...

Sep 15, 2025
CVE-2025-57569 5.6

This CVE describes a buffer overflow vulnerability in Tenda F3 routers through the portList parameter in the /goform/setNAT endpoint. Attackers could ...

Sep 10, 2025
CVE-2025-57570 5.6

This vulnerability allows attackers to execute arbitrary code or cause denial of service on Tenda F3 routers by sending specially crafted requests to ...

Sep 10, 2025
CVE-2025-57571 5.6

This CVE describes a buffer overflow vulnerability in Tenda F3 routers via the macFilterList parameter in the goform/setNAT endpoint. Attackers can po...

Sep 10, 2025
CVE-2025-57572 5.6

This CVE describes a buffer overflow vulnerability in Tenda F3 routers via the onlineList parameter in the setParentControl form handler. Attackers co...

Sep 10, 2025
CVE-2025-57573 5.6

This vulnerability allows remote attackers to execute arbitrary code or cause denial of service on Tenda F3 routers via a buffer overflow in the wifiT...

Sep 10, 2025
CVE-2025-57060 7.5

A stack overflow vulnerability exists in Tenda G3 routers in the dns_forward_rule_store function's rules parameter. Attackers can exploit this by send...

Sep 9, 2025
CVE-2025-57078 7.5

A stack overflow vulnerability exists in Tenda G3 routers through the pppoeServerWhiteMacIndex parameter in the formModifyPppAuthWhiteMac function. At...

Sep 9, 2025
CVE-2025-57085 9.8

This vulnerability in Tenda W30E routers allows attackers to cause a Denial of Service (DoS) by sending specially crafted requests that trigger a stac...

Sep 9, 2025
CVE-2025-57087 7.5

This vulnerability in Tenda W30E routers allows attackers to cause a Denial of Service (DoS) by sending specially crafted requests that trigger a stac...

Sep 9, 2025
CVE-2025-57063 7.5

This vulnerability in Tenda G3 routers allows attackers to cause a Denial of Service (DoS) by sending specially crafted requests that trigger a stack ...

Sep 9, 2025
CVE-2025-57069 7.5

This vulnerability in Tenda G3 routers allows attackers to cause a Denial of Service (DoS) by sending specially crafted requests that trigger a stack ...

Sep 9, 2025
CVE-2025-57071 7.5

A stack overflow vulnerability in Tenda G3 routers allows attackers to cause Denial of Service (DoS) by sending specially crafted requests to the VPN ...

Sep 9, 2025
CVE-2025-57058 7.5

This vulnerability in Tenda G3 routers allows attackers to trigger stack overflows via specially crafted requests to the formSetDebugCfg function, lea...

Sep 9, 2025
CVE-2025-57061 7.5

This vulnerability in Tenda G3 routers allows attackers to trigger stack overflows via specially crafted requests to the formIPMacBindModify function....

Sep 9, 2025
CVE-2025-55852 7.5

This buffer overflow vulnerability in Tenda AC8 routers allows attackers to execute arbitrary code by sending specially crafted requests to the formWi...

Sep 3, 2025
CVE-2025-9813 8.8

A buffer overflow vulnerability in Tenda CH22 router firmware allows remote attackers to execute arbitrary code or crash the device by sending special...

Sep 2, 2025
CVE-2025-9791 8.8

This vulnerability allows remote attackers to execute arbitrary code on Tenda AC20 routers via a stack-based buffer overflow in the /goform/fromAdvSet...

Sep 1, 2025
CVE-2025-9748 8.8

A stack-based buffer overflow vulnerability exists in Tenda CH22 router firmware version 1.0.0.1. Remote attackers can exploit this by sending special...

Aug 31, 2025
CVE-2025-9605 9.8

A stack-based buffer overflow vulnerability in Tenda AC21 and AC23 routers allows remote attackers to execute arbitrary code by sending specially craf...

Aug 29, 2025
CVE-2025-57215 7.5

A stack-based buffer overflow vulnerability exists in Tenda AC10 routers running firmware v16.03.10.20. Attackers can exploit this via the get_parentC...

Aug 28, 2025
CVE-2025-57220 5.3

An input validation flaw in the 'ate' service of Tenda AC10 routers allows unauthenticated attackers to send crafted UDP packets to escalate privilege...

Aug 28, 2025
CVE-2025-57217 5.3

This CVE describes a stack buffer overflow vulnerability in Tenda AC10 routers that allows remote attackers to execute arbitrary code via the Password...

Aug 28, 2025
CVE-2025-52054 5.3

This vulnerability allows unauthenticated attackers to calculate the root password of Tenda AC8 routers using a static algorithm based on the device's...

Aug 28, 2025
CVE-2025-55495 6.5

This buffer overflow vulnerability in Tenda AC6 routers allows attackers to execute arbitrary code by sending specially crafted requests to the fromSe...

Aug 27, 2025
CVE-2025-9523 9.8

This vulnerability in Tenda AC1206 routers allows remote attackers to execute arbitrary code via a stack-based buffer overflow in the GetParentControl...

Aug 27, 2025
CVE-2025-9443 8.8

A buffer overflow vulnerability in Tenda CH22 routers allows remote attackers to execute arbitrary code by manipulating the new_account parameter in t...

Aug 26, 2025
CVE-2025-55613 9.8

A buffer overflow vulnerability in Tenda O3V2 routers allows attackers to execute arbitrary code by sending specially crafted requests to the fromSafe...

Aug 22, 2025
CVE-2025-55603 7.5

A buffer overflow vulnerability exists in Tenda AX3 routers running firmware version V16.03.12.10_CN. Attackers can exploit this by sending specially ...

Aug 22, 2025

Why Monitor Tenda Security Vulnerabilities?

Real-time CVE tracking: Our automated system monitors 746+ known vulnerabilities affecting Tenda products and software packages. Stay ahead of emerging threats with instant email notifications when new security issues are discovered.

Automated security monitoring: Unlike manual CVE checking, FixTheCVE automatically scans your servers and detects vulnerable Tenda packages in under 60 seconds. No agents required - completely agentless scanning that works across Tenda deployments.

Free vulnerability database: Access detailed information about every Tenda CVE including CVSS scores, severity ratings, affected versions, and actionable patch guidance. Filter by critical, high, medium, or low severity to prioritize your security remediation efforts.

🚀 Get Started in 60 Seconds

  • Register free account & add your servers
  • Run one-time scan or schedule automatic monitoring (every 1-24 hours)
  • Receive instant alerts when new Tenda CVEs affect your systems
  • Access dashboard with severity breakdown & fix instructions
Start Monitoring Tenda CVEs Free