SShenzhen Tenda Technology Co., Ltd.

Products

Exploited and recent CVEs

• CVE-2026-27514 Medium 6.5 Tenda F3 Plaintext Credential Exposure in Configuration Download 0.3%
• CVE-2026-27513 Medium 4.3 Tenda F3 CSRF in Web Management Interface 0.1%
• CVE-2026-27512 Medium 6.1 Tenda F3 Reflected Script Execution via Missing nosniff Header 0.2%
• CVE-2026-27511 Medium 4.3 Tenda F3 Clickjacking in Web Management Interface 0.2%
• CVE-2026-24441 High 8.2 Tenda AC7 Transmits Admin Credentials Without HTTPS Protection 0.2%
• CVE-2026-24434 Medium 5.1 Tenda AC7 Web Interface Lacks CSRF Protections for Admin Actions 0.2%
• CVE-2026-24427 Medium 6.8 Tenda AC7 Exposes Admin Credentials in Configuration Responses 0.1%
• CVE-2026-24426 Medium 5.1 Tenda AC7 Reflected XSS via Web Interface Output Encoding 0.2%
• CVE-2026-24435 High 7.1 Tenda W30E V2 Permissive CORS Allows Cross-origin Data Access 0.2%
• CVE-2026-24439 Low 2.1 Tenda W30E V2 Lacks X-Content-Type-Options Header 0.2%
• CVE-2026-24432 Medium 5.1 Tenda W30E V2 Missing CSRF Protections for Administrative Actions 0.1%
• CVE-2026-24433 Medium 5.1 Tenda W30E V2 Stored XSS via Username Field 0.2%
• CVE-2026-24431 High 7.1 Tenda W30E V2 Web UI Reveals Passwords in Cleartext 0.2%
• CVE-2026-24437 Medium 4.8 Tenda W30E V2 Missing Cache Controls for Credential-bearing Pages 0.2%
• CVE-2026-24436 Critical 9.2 Tenda W30E V2 Lacks Rate Limiting on Authentication 0.5%
• CVE-2026-24428 High 8.7 Tenda W30E V2 Incorrect Authorization Allows Administrator Password Change 0.3%
• CVE-2026-24430 High 8.2 Tenda W30E V2 HTTP Responses Expose Plaintext Credentials 0.3%
• CVE-2026-24429 Critical 9.3 Tenda W30E V2 Hardcoded Default Password for Built-in Account 0.4%
• CVE-2026-24440 High 8.7 Tenda W30E V2 Allows Password Changes Without Verifying Current Password 0.3%