# Tenda vulnerabilities Source: https://junglewise.ai/threats/vendors/tenda Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 13 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/vendors/tenda.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 327 vulnerabilities in Tenda: 1 in the last 7 days and 31 in the last 90 days, 39 of them critical and 3 exploited in the wild. The most recent, CVE-2026-123966, was published on 7 November 2026. 5 vulnerabilities in the last four weeks, level on the four before (5). 3 critical against 3. 67 technologies have a page of their own. ## Counts - Last 7 days: 1 - Last 30 days: 5 - Last 90 days: 31 - All time: 327 (39 critical, 3 exploited in the wild) ## About Tenda A manufacturer of networking devices and equipment. ## Latest Tenda vulnerabilities - [CVE-2026-123966: Tenda AC19 heap buffer overflow in saveParentControlInfo](https://junglewise.ai/threats/cve-2026-123966-a-vulnerability-was-determined-in-tenda-ac19-16-03-10-07) (critical, CVSS 10, published 7 Nov 2026) - [CVE-2026-118238: Tenda W18E command injection in web management diagnose feature](https://junglewise.ai/threats/cve-2026-118238-the-tenda-w18e-web-management-server-is-vulnerable-to-os-command) (info, published 30 Oct 2026) - [CVE-2026-115796: Tenda F6 cross-site request forgery in web management interface](https://junglewise.ai/threats/cve-2026-115796-a-security-flaw-has-been-discovered-in-tenda-f6-12-02-01-73-this) (medium, CVSS 4.3, published 23 Oct 2026) - [CVE-2026-114268: Tenda BE3L Pro buffer overflow in WifiBasicSet](https://junglewise.ai/threats/cve-2026-114268-a-flaw-has-been-found-in-tenda-be3l-pro-16-03-60-62-affected-by) (critical, CVSS 9.9, published 21 Oct 2026) - [CVE-2026-113744: Tenda AC19 stack buffer overflow in firewall configuration](https://junglewise.ai/threats/cve-2026-113744-a-security-vulnerability-has-been-detected-in-tenda-ac19-16-03) (critical, CVSS 10, published 21 Oct 2026) - [CVE-2026-105778: Tenda AC5 stack-based buffer overflow in WiFi handler](https://junglewise.ai/threats/cve-2026-105778-a-vulnerability-has-been-found-in-tenda-ac5-02-03-01-111-multi) (critical, CVSS 9.9, published 6 Oct 2026) - [CVE-2026-104611: Tenda AC9 stack buffer overflow in POST request handler](https://junglewise.ai/threats/cve-2026-104611-a-vulnerability-was-detected-in-tenda-ac9-15-03-02-13-affected) (critical, CVSS 9.1, published 2 Oct 2026) - [CVE-2026-104610: Tenda HG7/HG9/HG10 stack buffer overflow in formLoopBack](https://junglewise.ai/threats/cve-2026-104610-a-security-vulnerability-has-been-detected-in-tenda-hg7-hg9-and) (critical, CVSS 10, published 2 Oct 2026) - [CVE-2026-90689: Tenda W20E stack buffer overflow in formDelWebAuthWhiteUser](https://junglewise.ai/threats/cve-2026-90689-tenda-w20e-stack-buffer-overflow-in-formdelwebauthwhiteuser) (high, CVSS 8.8, published 14 Sep 2026) - [CVE-2026-90688: Tenda W20E stack buffer overflow in formIPMacBindAdd](https://junglewise.ai/threats/cve-2026-90688-tenda-w20e-stack-buffer-overflow-in-formipmacbindadd) (medium, CVSS 6.5, published 14 Sep 2026) - [CVE-2026-86300: Tenda AC9 authentication bypass in web management](https://junglewise.ai/threats/cve-2026-86300-tenda-ac9-authentication-bypass-in-web-management) (high, CVSS 7.3, published 7 Sep 2026) - [CVE-2026-86167: Tenda HG10 OS command injection in formgponConf](https://junglewise.ai/threats/cve-2026-86167-tenda-hg10-os-command-injection-in-formgponconf) (critical, CVSS 9.9, published 6 Sep 2026) - [CVE-2026-86166: Tenda HG10 buffer overflow in formWanRedirect](https://junglewise.ai/threats/cve-2026-86166-tenda-hg10-buffer-overflow-in-formwanredirect) (high, CVSS 8.8, published 6 Sep 2026) - [CVE-2026-86165: Tenda HG10 buffer overflow in formURL](https://junglewise.ai/threats/cve-2026-86165-tenda-hg10-buffer-overflow-in-formurl) (critical, CVSS 9.8, published 6 Sep 2026) - [CVE-2026-86153: Tenda CP3 privilege escalation in redirect server](https://junglewise.ai/threats/cve-2026-86153-tenda-cp3-privilege-escalation-in-redirect-server) (critical, CVSS 9.1, published 6 Sep 2026) - [CVE-2026-86152: Tenda CP3 OS command injection in AutoAddWifi](https://junglewise.ai/threats/cve-2026-86152-tenda-cp3-os-command-injection-in-autoaddwifi) (critical, CVSS 10, published 6 Sep 2026) - [CVE-2026-86151: Tenda CP3 OS command injection in Network Configuration Management](https://junglewise.ai/threats/cve-2026-86151-tenda-cp3-os-command-injection-in-network-configuration) (critical, CVSS 9.1, published 6 Sep 2026) - [CVE-2026-86150: Tenda CP3 hard-coded credentials in hostapd configuration](https://junglewise.ai/threats/cve-2026-86150-tenda-cp3-hard-coded-credentials-in-hostapd-configuration) (medium, CVSS 4.1, published 5 Sep 2026) - [CVE-2026-86149: Tenda CP3 OS command injection via interface_name argument](https://junglewise.ai/threats/cve-2026-86149-tenda-cp3-os-command-injection-via-interface-name-argument) (critical, CVSS 9.1, published 5 Sep 2026) - [CVE-2026-86148: Tenda CP3 OS command injection in SystemAsh](https://junglewise.ai/threats/cve-2026-86148-tenda-cp3-os-command-injection-in-systemash) (critical, CVSS 9.1, published 5 Sep 2026) - [CVE-2026-85110: Tenda HG10 buffer overflow in formWlanSetup SSID parameter](https://junglewise.ai/threats/cve-2026-85110-tenda-hg10-buffer-overflow-in-formwlansetup-ssid-parameter) (high, CVSS 8.8, published 3 Sep 2026) - [CVE-2026-85109: Tenda HG10 buffer overflow in Boa Web Server login handler](https://junglewise.ai/threats/cve-2026-85109-tenda-hg10-buffer-overflow-in-boa-web-server-login-handler) (critical, CVSS 9.8, published 3 Sep 2026) - [CVE-2026-51934: Tenda A18 buffer overflow in fromSetCmdlineRun](https://junglewise.ai/threats/cve-2026-51934-tenda-a18-buffer-overflow-in-fromsetcmdlinerun) (critical, CVSS 9.8, published 1 Sep 2026) - [CVE-2026-38577: Tenda HG21 hardcoded credentials in admin account](https://junglewise.ai/threats/cve-2026-38577-tenda-hg21-hardcoded-credentials-in-admin-account) (critical, CVSS 9.8, published 31 Aug 2026) - [CVE-2026-82695: Tenda AC18 authentication bypass in telnet handler](https://junglewise.ai/threats/cve-2026-82695-tenda-ac18-authentication-bypass-in-telnet-handler) (critical, CVSS 10, published 31 Aug 2026) ## Most severe Tenda vulnerabilities - [CVE-2021-31755: Tenda AC11 Router Stack Buffer Overflow Vulnerability](https://junglewise.ai/threats/cve-2021-31755-tenda-ac11-router-stack-buffer-overflow-vulnerability) (critical, exploited in the wild, CVSS 9.8, published 3 Nov 2021) - [CVE-2020-10987: Tenda AC1900 Router AC15 Model Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2020-10987-tenda-ac1900-router-ac15-model-remote-code-execution) (critical, exploited in the wild, CVSS 9.8, published 3 Nov 2021) - [CVE-2018-14558: Tenda AC7, AC9, and AC10 Routers Command Injection Vulnerability](https://junglewise.ai/threats/cve-2018-14558-tenda-ac7-ac9-and-ac10-routers-command-injection-vulnerability) (critical, exploited in the wild, CVSS 9.8, published 3 Nov 2021) - [CVE-2026-86152: Tenda CP3 OS command injection in AutoAddWifi](https://junglewise.ai/threats/cve-2026-86152-tenda-cp3-os-command-injection-in-autoaddwifi) (critical, CVSS 10, published 6 Sep 2026) - [CVE-2026-82694: Tenda AC1206 authentication bypass in Web UI](https://junglewise.ai/threats/cve-2026-82694-tenda-ac1206-authentication-bypass-in-web-ui) (critical, CVSS 10, published 31 Aug 2026) - [CVE-2026-82693: Tenda AC1206 authentication bypass in web UI telnet function](https://junglewise.ai/threats/cve-2026-82693-tenda-ac1206-authentication-bypass-in-web-ui-telnet-function) (critical, CVSS 10, published 31 Aug 2026) - [CVE-2026-82695: Tenda AC18 authentication bypass in telnet handler](https://junglewise.ai/threats/cve-2026-82695-tenda-ac18-authentication-bypass-in-telnet-handler) (critical, CVSS 10, published 31 Aug 2026) - [CVE-2026-82542: Tenda HG10 buffer overflow in formIPv6Routing](https://junglewise.ai/threats/cve-2026-82542-tenda-hg10-buffer-overflow-in-formipv6routing) (critical, CVSS 10, published 30 Aug 2026) - [CVE-2026-104610: Tenda HG7/HG9/HG10 stack buffer overflow in formLoopBack](https://junglewise.ai/threats/cve-2026-104610-a-security-vulnerability-has-been-detected-in-tenda-hg7-hg9-and) (critical, CVSS 10, published 2 Oct 2026) - [CVE-2026-123966: Tenda AC19 heap buffer overflow in saveParentControlInfo](https://junglewise.ai/threats/cve-2026-123966-a-vulnerability-was-determined-in-tenda-ac19-16-03-10-07) (critical, CVSS 10, published 7 Nov 2026) ## Vulnerabilities per week 5 vulnerabilities in the last four weeks, level on the four before (5). 3 critical against 3. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 3 | 0 | 0 | | 24 Aug 2026 | 1 | 1 | 0 | | 31 Aug 2026 | 16 | 13 | 0 | | 7 Sep 2026 | 1 | 0 | 0 | | 14 Sep 2026 | 2 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 2 | 2 | 0 | | 5 Oct 2026 | 1 | 1 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 3 | 2 | 0 | | 26 Oct 2026 | 1 | 0 | 0 | | 2 Nov 2026 | 1 | 1 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Tenda technologies - [Tenda CH22](https://junglewise.ai/threats/technologies/ch22): 24 vulnerabilities - [Tenda F456](https://junglewise.ai/threats/technologies/f456): 23 vulnerabilities - [Tenda F456 Firmware](https://junglewise.ai/threats/technologies/f456-firmware): 22 vulnerabilities - [Tenda Ch22 Firmware](https://junglewise.ai/threats/technologies/ch22-firmware): 20 vulnerabilities - [Tenda Wh450](https://junglewise.ai/threats/technologies/wh450): 19 vulnerabilities - [Tenda Wh450 Firmware](https://junglewise.ai/threats/technologies/wh450-firmware): 19 vulnerabilities - [Tenda F451](https://junglewise.ai/threats/technologies/f451): 17 vulnerabilities - [Tenda CP3](https://junglewise.ai/threats/technologies/cp3): 14 vulnerabilities - [Tenda F451 Firmware](https://junglewise.ai/threats/technologies/f451-firmware): 14 vulnerabilities - [Tenda AC7](https://junglewise.ai/threats/technologies/ac7): 13 vulnerabilities - [Tenda O3](https://junglewise.ai/threats/technologies/o3): 11 vulnerabilities - [Tenda W20E](https://junglewise.ai/threats/technologies/w20e): 11 vulnerabilities - [Tenda G0](https://junglewise.ai/threats/technologies/g0): 10 vulnerabilities - [Tenda HG10](https://junglewise.ai/threats/technologies/hg10): 10 vulnerabilities - [Tenda W15E](https://junglewise.ai/threats/technologies/w15e): 10 vulnerabilities - [Tenda AC10](https://junglewise.ai/threats/technologies/ac10): 9 vulnerabilities - [Tenda AC10 Firmware](https://junglewise.ai/threats/technologies/ac10-firmware): 8 vulnerabilities - [Tenda AC6](https://junglewise.ai/threats/technologies/ac6): 8 vulnerabilities - [Tenda AC6 firmware](https://junglewise.ai/threats/technologies/ac6-firmware): 8 vulnerabilities - [Tenda Ac7 Firmware](https://junglewise.ai/threats/technologies/ac7-firmware): 8 vulnerabilities - [Tenda W3 Wireless Router](https://junglewise.ai/threats/technologies/w3-wireless-router): 8 vulnerabilities - [Tenda AC8](https://junglewise.ai/threats/technologies/ac8): 7 vulnerabilities - [Tenda Ac8 Firmware](https://junglewise.ai/threats/technologies/ac8-firmware): 7 vulnerabilities - [Tenda CX12L](https://junglewise.ai/threats/technologies/cx12l): 7 vulnerabilities - [Tenda CX12L Firmware](https://junglewise.ai/threats/technologies/cx12l-firmware): 7 vulnerabilities - [Tenda W12](https://junglewise.ai/threats/technologies/w12): 7 vulnerabilities - [Tenda 5G03](https://junglewise.ai/threats/technologies/5g03): 6 vulnerabilities - [Tenda BE12 Pro](https://junglewise.ai/threats/technologies/be12-pro): 6 vulnerabilities - [Tenda F3](https://junglewise.ai/threats/technologies/f3): 6 vulnerabilities - [Tenda M3](https://junglewise.ai/threats/technologies/m3): 6 vulnerabilities - [Tenda M3 Firmware](https://junglewise.ai/threats/technologies/m3-firmware): 6 vulnerabilities - [Tenda O3 Firmware1.0.0.10\(2478\)](https://junglewise.ai/threats/technologies/o3-firmware1-0-0-10-2478): 6 vulnerabilities - [Tenda AC1206](https://junglewise.ai/threats/technologies/ac1206): 5 vulnerabilities - [Tenda AC15](https://junglewise.ai/threats/technologies/ac15): 5 vulnerabilities - [Tenda AC18](https://junglewise.ai/threats/technologies/ac18): 5 vulnerabilities - [Tenda Ac23](https://junglewise.ai/threats/technologies/ac23): 5 vulnerabilities - [Tenda Ac23 Firmware](https://junglewise.ai/threats/technologies/ac23-firmware): 5 vulnerabilities - [Tenda Ac9](https://junglewise.ai/threats/technologies/ac9): 5 vulnerabilities - [Tenda CP3 V3.0 firmware](https://junglewise.ai/threats/technologies/cp3-v3-0-firmware): 5 vulnerabilities - [Tenda F3 Firmware](https://junglewise.ai/threats/technologies/f3-firmware): 5 vulnerabilities - [Tenda JD12L Pro](https://junglewise.ai/threats/technologies/jd12l-pro): 5 vulnerabilities - [Tenda TX9 Pro](https://junglewise.ai/threats/technologies/tx9-pro): 5 vulnerabilities - [Tenda AC15 firmware](https://junglewise.ai/threats/technologies/ac15-firmware): 4 vulnerabilities - [Tenda Ac20](https://junglewise.ai/threats/technologies/ac20): 4 vulnerabilities - [Tenda Ac20 Firmware](https://junglewise.ai/threats/technologies/ac20-firmware): 4 vulnerabilities - [Tenda AC8V4](https://junglewise.ai/threats/technologies/ac8v4): 4 vulnerabilities - [Tenda CX12L Router](https://junglewise.ai/threats/technologies/cx12l-router): 4 vulnerabilities - [Tenda F1202](https://junglewise.ai/threats/technologies/f1202): 4 vulnerabilities - [Tenda Hg3](https://junglewise.ai/threats/technologies/hg3): 4 vulnerabilities - [Tenda Hg3 Firmware](https://junglewise.ai/threats/technologies/hg3-firmware): 4 vulnerabilities - [Tenda Ac18 Firmware](https://junglewise.ai/threats/technologies/ac18-firmware): 3 vulnerabilities - [Tenda Ac21](https://junglewise.ai/threats/technologies/ac21): 3 vulnerabilities - [Tenda Ac21 Firmware](https://junglewise.ai/threats/technologies/ac21-firmware): 3 vulnerabilities - [Tenda Ac9 Firmware](https://junglewise.ai/threats/technologies/ac9-firmware): 3 vulnerabilities - [Tenda CH10](https://junglewise.ai/threats/technologies/ch10): 3 vulnerabilities - [Tenda CH7](https://junglewise.ai/threats/technologies/ch7): 3 vulnerabilities - [Tenda CH7G](https://junglewise.ai/threats/technologies/ch7g): 3 vulnerabilities - [Tenda CP3 Pro](https://junglewise.ai/threats/technologies/cp3-pro): 3 vulnerabilities - [Tenda CP7](https://junglewise.ai/threats/technologies/cp7): 3 vulnerabilities - [Tenda FH1201 firmware](https://junglewise.ai/threats/technologies/fh1201-firmware): 3 vulnerabilities - [Tenda HG7](https://junglewise.ai/threats/technologies/hg7): 3 vulnerabilities - [Tenda HG9](https://junglewise.ai/threats/technologies/hg9): 3 vulnerabilities - [Tenda PW201A](https://junglewise.ai/threats/technologies/pw201a): 3 vulnerabilities - [Tenda TC3B14C](https://junglewise.ai/threats/technologies/tc3b14c): 3 vulnerabilities - [Tenda TC3B15C](https://junglewise.ai/threats/technologies/tc3b15c): 3 vulnerabilities - [Tenda TC3T14C](https://junglewise.ai/threats/technologies/tc3t14c): 3 vulnerabilities - [Tenda TC3T15C](https://junglewise.ai/threats/technologies/tc3t15c): 3 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Tenda vulnerabilities", https://junglewise.ai/threats/vendors/tenda, 13 November 2026.