CVE Tools

Tenda

1,915 CVEs tracked since 2014. Since Aug 2014, 2 of them reached CISA KEV.

Tenda CVEs per month

Aug 2014 to Sep 2026. Point at a month, or focus the strip and use the arrow keys.
Tenda CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2014-0810
2014-09null or fewer
2014-10null or fewer
2014-11null or fewer
2014-12null or fewer
2015-01null or fewer
2015-02null or fewer
2015-03null or fewer
2015-04null or fewer
2015-05null or fewer
2015-06null or fewer
2015-07null or fewer
2015-08null or fewer
2015-09null or fewer
2015-10null or fewer
2015-11null or fewer
2015-1210
2016-01null or fewer
2016-02null or fewer
2016-03null or fewer
2016-04null or fewer
2016-05null or fewer
2016-06null or fewer
2016-07null or fewer
2016-08null or fewer
2016-09null or fewer
2016-10null or fewer
2016-11null or fewer
2016-12null or fewer
2017-01null or fewer
2017-02null or fewer
2017-03null or fewer
2017-04null or fewer
2017-05null or fewer
2017-06null or fewer
2017-07null or fewer
2017-08null or fewer
2017-0920
2017-10null or fewer
2017-11null or fewer
2017-12null or fewer
2018-01null or fewer
2018-02null or fewer
2018-03null or fewer
2018-04null or fewer
2018-05null or fewer
2018-06null or fewer
2018-07null or fewer
2018-08null or fewer
2018-09null or fewer
2018-10111
2018-11null or fewer
2018-12null or fewer
2019-01null or fewer
2019-02null or fewer
2019-03null or fewer
2019-04null or fewer
2019-05null or fewer
2019-06null or fewer
2019-07null or fewer
2019-08null or fewer
2019-09null or fewer
2019-10null or fewer
2019-11null or fewer
2019-12null or fewer
2020-01null or fewer
2020-02null or fewer
2020-03null or fewer
2020-04null or fewer
2020-05null or fewer
2020-06null or fewer
2020-07null or fewer
2020-08null or fewer
2020-09null or fewer
2020-10null or fewer
2020-11null or fewer
2020-12null or fewer
2021-01null or fewer
2021-02null or fewer
2021-03null or fewer
2021-0430
2021-0541
2021-06null or fewer
2021-07null or fewer
2021-08null or fewer
2021-09null or fewer
2021-10null or fewer
2021-11null or fewer
2021-12null or fewer
2022-01null or fewer
2022-02330
2022-03610
2022-0440
2022-05240
2022-06null or fewer
2022-07160
2022-08520
2022-09390
2022-10340
2022-11340
2022-12910
2023-0170
2023-0280
2023-03null or fewer
2023-04320
2023-05110
2023-06140
2023-07200
2023-08650
2023-0940
2023-10null or fewer
2023-11230
2023-12470
2024-01550
2024-02110
2024-031350
2024-041020
2024-05220
2024-06null or fewer
2024-07190
2024-08590
2024-0990
2024-10120
2024-11160
2024-1240
2025-01180
2025-02230
2025-03460
2025-04240
2025-05390
2025-06390
2025-07630
2025-08470
2025-09450
2025-10550
2025-11250
2025-12510
2026-01490
2026-02540
2026-03880
2026-04870
2026-05150
2026-06170
2026-0790
2026-08220
2026-09140

Products

The products that kept showing up in Tenda's monthly top three, with their CVEs summed over those months.

  1. AC18 Firmware708 months
  2. AC6 Firmware669 months
  3. W30E Firmware564 months
  4. AC10 Firmware528 months
  5. AC9 Firmware527 months
  6. AX1806 Firmware516 months
  7. AX1803 Firmware414 months
  8. FH1202 Firmware403 months
  9. AX3 Firmware364 months
  10. AC8 Firmware304 months

Latest CVEs

The 15 most recently published vulnerabilities affecting Tenda.

  1. CVE-2026-90689Tenda W20E formDelWebAuthWhiteUser stack-based overflow8.8
  2. CVE-2026-90688Tenda W20E HTTP formIPMacBindAdd stack-based overflow6.5
  3. CVE-2026-86300Tenda AC9 Web Management R7WebsSecurityHandler improper authentication7.3
  4. CVE-2026-86167Tenda HG10 Boa formgponConf os command injection9.9
  5. CVE-2026-86166Tenda HG10 Boa Web Server formWanRedirect buffer overflow8.8
  6. CVE-2026-86165Tenda HG10 formURL buffer overflow9.8
  7. CVE-2026-86153Tenda CP3 Redirect.cpp SetRedirectEnable privileges management9.1
  8. CVE-2026-86152Tenda CP3 Kylin AutoAddWifi.cpp ThreadProc os command injection10.0
  9. CVE-2026-86151Tenda CP3 Network Configuration Management system.c sub_2F77E8 os command injection9.1
  10. CVE-2026-86150Tenda CP3 hostapd hard-coded credentials4.1
  11. CVE-2026-86149Tenda CP3 NetCheckPing.cpp os command injection9.1
  12. CVE-2026-86148Tenda CP3 Kylin system.c SystemAsh os command injection9.1
  13. CVE-2026-85110Tenda HG10 Boa Web Server formWlanSetup buffer overflow8.8
  14. CVE-2026-85109Tenda HG10 Boa Web Server formLogin buffer overflow9.8
  15. CVE-2026-82695Tenda AC18 Telnet telnet missing authentication10.0

The record

Peak rank
#5 in Mar 2024
Busiest month shown
Mar 2024, 135 CVEs
Months with a KEV entry
2 since Aug 2014
Monthly snapshots
58 since 2014
Tenda's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store