Tenda
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| CH22 | 42 | – | Aug 23, 2026 |
| AC15 | 37 | – | Jun 8, 2026 |
| FH1202 | 33 | – | Apr 26, 2026 |
| AC18 | 32 | – | Aug 31, 2026 |
| AC7 | 30 | – | Mar 27, 2026 |
| F453 | 30 | – | Apr 25, 2026 |
| F456 | 28 | – | May 24, 2026 |
| AC10U | 26 | – | Dec 30, 2025 |
| FH451 | 23 | – | Mar 22, 2026 |
| AC8 | 21 | – | Mar 16, 2026 |
| WH450 | 21 | – | Dec 29, 2025 |
| F451 | 20 | – | Jun 8, 2026 |
| AC20 | 20 | – | Dec 30, 2025 |
| AC10 | 19 | – | Aug 16, 2026 |
| AC6 | 18 | – | May 11, 2026 |
| AC9 | 15 | – | Oct 2, 2026 |
| AC1206 | 14 | – | Aug 31, 2026 |
| HG10 | 14 | – | Oct 2, 2026 |
| i21 | 14 | – | May 5, 2024 |
| FH1201 | 13 | – | Mar 29, 2026 |
| AC23 | 13 | – | Jan 26, 2026 |
| W15E | 13 | – | Apr 24, 2024 |
| W12 | 13 | – | May 31, 2026 |
| W9 | 12 | – | Apr 26, 2024 |
| O3 | 12 | – | Oct 27, 2025 |
| AC5 | 11 | – | Oct 6, 2026 |
| AC21 | 11 | – | Mar 23, 2026 |
| M3 | 10 | – | Apr 5, 2026 |
| CP3 | 10 | – | Sep 6, 2026 |
| O3V2 | 10 | – | Jul 11, 2025 |
| HG9 | 10 | – | Oct 2, 2026 |
| FH1205 | 10 | – | Jul 14, 2025 |
| W20E | 9 | – | Sep 14, 2026 |
| F1202 | 9 | – | May 25, 2026 |
| CX12L | 8 | – | Jun 8, 2026 |
| AC500 | 8 | – | Jul 14, 2025 |
| FH1203 | 8 | – | Jun 16, 2025 |
| RX3 | 8 | – | Feb 8, 2026 |
| TX3 | 8 | – | Aug 13, 2026 |
| A15 | 8 | – | Mar 23, 2026 |
| i3 | 8 | – | Apr 9, 2026 |
| 4G300 | 7 | – | Apr 30, 2026 |
| FH1206 | 7 | – | Dec 21, 2025 |
| W3 | 7 | – | Mar 12, 2026 |
| i22 | 7 | – | Aug 21, 2025 |
| TX9 | 7 | – | Feb 8, 2026 |
| AC6 V5.0 | 6 | – | Aug 20, 2025 |
| A21 | 6 | – | Feb 21, 2026 |
| BE12 Pro | 6 | – | Jul 14, 2026 |
| i6 | 5 | – | Apr 10, 2026 |
| i12 | 5 | – | Apr 9, 2026 |
| JD12L | 5 | – | Jun 29, 2026 |
| A18 Pro | 5 | – | Mar 20, 2026 |
| i24 | 5 | – | Dec 31, 2025 |
| W30E | 5 | – | Apr 25, 2024 |
| A301 | 5 | – | Aug 7, 2024 |
| HG3 | 4 | – | Apr 27, 2026 |
| A18 | 4 | – | Feb 22, 2026 |
| G3 | 4 | – | Aug 27, 2024 |
| AX1803 | 4 | – | Jan 22, 2026 |
| F1203 | 4 | – | Mar 27, 2024 |
| HG7 | 4 | – | Oct 2, 2026 |
| 300Mbps Wireless Router F3 and N300 Easy Setup Router | 4 | – | Jan 9, 2026 |
| RX9 Pro | 4 | – | Oct 24, 2024 |
| TC3B15C | 3 | – | Aug 13, 2026 |
| TC3B14C | 3 | – | Aug 13, 2026 |
| TC3T14C | 3 | – | Aug 13, 2026 |
| CP7 | 3 | – | Aug 13, 2026 |
| RX9 | 3 | – | Oct 23, 2024 |
| CH10 | 3 | – | Aug 13, 2026 |
| DAP-1520 | 3 | – | May 6, 2025 |
| CH7G | 3 | – | Aug 13, 2026 |
| CP3 Pro | 3 | – | Aug 13, 2026 |
| CH7 | 3 | – | Aug 13, 2026 |
| 4G03 Pro | 3 | – | Apr 4, 2026 |
| AX1806 | 3 | – | Apr 26, 2024 |
| TC3T15C | 3 | – | Aug 13, 2026 |
| i9 | 3 | – | Apr 26, 2026 |
| O6 | 3 | – | Aug 28, 2024 |
| G0 | 3 | – | Aug 14, 2026 |
| G103 | 2 | – | Apr 2, 2026 |
| W6-S | 2 | – | Dec 30, 2025 |
| W18E | 2 | – | Oct 30, 2026 |
| O1 | 2 | – | Aug 28, 2024 |
| F6 | 2 | – | Oct 23, 2026 |
| W6 | 2 | – | Jan 29, 2024 |
| PA6 | 1 | – | Jan 15, 2024 |
| AX9 | 1 | – | Dec 13, 2025 |
| firmware | 1 | – | Jul 6, 2026 |
| RP3 Pro | 1 | – | Oct 13, 2025 |
| AC19 | 1 | – | Oct 21, 2026 |
| G1 | 1 | – | Aug 14, 2025 |
| Nova MW5G | 1 | – | Dec 31, 2025 |
| O5 | 1 | – | Aug 28, 2024 |
| CP | 1 | – | Aug 13, 2026 |
| G0-8G-PoE | 1 | – | Dec 31, 2025 |
| AC12 | 1 | – | Aug 14, 2026 |
| N300 Wireless N VDSL2 Modem Router | 1 | – | Sep 6, 2023 |
| 4G05 | 1 | – | Dec 31, 2025 |
| TDSEE App | 1 | – | Jun 9, 2025 |
| AX12 Pro V2 | 1 | – | Jan 29, 2026 |
| 4G08 | 1 | – | Dec 31, 2025 |
| 4G06 | 1 | – | Mar 29, 2026 |
| CH | 1 | – | Aug 13, 2026 |
| BE3L Pro | 1 | – | Oct 21, 2026 |
| CP6 | 1 | – | Sep 2, 2025 |
| AC7 1200M | 1 | – | Mar 2, 2025 |
| TEG5328F | 1 | – | Dec 31, 2025 |
Exploited and recent CVEs
- CVE-2026-118238 CVE-2026-118238 1.5%
- CVE-2026-115797 Tenda F6 Web Management cleartext transmission 0.2%
- CVE-2026-115796 Tenda F6 Web Management cross-site request forgery 0.2%
- CVE-2026-114268 Tenda BE3L Pro WifiBasicSet formWifiBasicSet buffer overflow 0.5%
- CVE-2026-113744 Tenda AC19 httpd Web Management Service SetFirewallCfg formSetFirewallCfg stack-based overflow 0.6%
- CVE-2026-105778 Tenda AC5 Wifi setWifi stack-based overflow 0.5%
- CVE-2026-104611 Tenda AC9 POST Request fast_setting_internet_set stack-based overflow 0.5%
- CVE-2026-104610 Tenda HG7/HG9/HG10 Boa Web Server formLoopBack boaGetVar stack-based overflow 0.6%
- CVE-2026-104610 Tenda HG7/HG9/HG10 Boa Web Server formLoopBack boaGetVar stack-based overflow 0.6%
- CVE-2026-104610 Tenda HG7/HG9/HG10 Boa Web Server formLoopBack boaGetVar stack-based overflow 0.6%
- CVE-2026-90689 Tenda W20E formDelWebAuthWhiteUser stack-based overflow 0.9%
- CVE-2026-90688 Tenda W20E HTTP formIPMacBindAdd stack-based overflow 0.7%
- CVE-2026-86300 Tenda AC9 Web Management R7WebsSecurityHandler improper authentication 0.8%
- CVE-2026-86167 Tenda HG10 Boa formgponConf os command injection 2.7%
- CVE-2026-86166 Tenda HG10 Boa Web Server formWanRedirect buffer overflow 0.9%
- CVE-2026-86165 Tenda HG10 formURL buffer overflow 1.1%
- CVE-2026-86153 Tenda CP3 Redirect.cpp SetRedirectEnable privileges management 0.7%
- CVE-2026-86152 Tenda CP3 Kylin AutoAddWifi.cpp ThreadProc os command injection 2.9%
- CVE-2026-86151 Tenda CP3 Network Configuration Management system.c sub_2F77E8 os command injection 2.9%
- CVE-2026-86150 Tenda CP3 hostapd hard-coded credentials 0.4%
- CVE-2026-86149 Tenda CP3 NetCheckPing.cpp os command injection 2.9%
- CVE-2026-86148 Tenda CP3 Kylin system.c SystemAsh os command injection 2.9%
- CVE-2026-85110 Tenda HG10 Boa Web Server formWlanSetup buffer overflow 0.9%
- CVE-2026-85109 Tenda HG10 Boa Web Server formLogin buffer overflow 1.1%
- CVE-2026-82695 Tenda AC18 Telnet telnet missing authentication 1.4%
- CVE-2026-82694 Tenda AC1206 Web UI ate R7WebsSecurityHandler missing authentication 1.4%
- CVE-2026-82693 Tenda AC1206 Web UI telnet TendaTelnet missing authentication 1.4%
- CVE-2026-82542 Tenda HG10 Boa Web Server formIPv6Routing buffer overflow 1.1%
- CVE-2026-78141 Tenda CH22 exeCommand formexeCommand command injection 2.7%
- CVE-2026-78063 Tenda CH22 editFileName formeditFileName command injection 2.7%