Tenda
Number 23 by total vulnerabilities in the catalog.
Computed from the whole catalog when the site is built.
Total vulnerabilities
1,147
Critical
103
High
763
Known Exploited
3
Exploit available
769
Visible in Bangladesh
0
Services seen by internet scanning
Network, no login needed
16.7%
Of 1,052 scored records
- Critical
- High
- Medium
- Low
- None or not scored
Show as table
| Period | Total | Critical | High | Medium | Low | None or not scored |
|---|---|---|---|---|---|---|
| 2026 (incomplete) | 300 | 28 | 242 | 27 | 3 | 0 |
| 2025 | 284 | 17 | 220 | 39 | 8 | 0 |
| 2024 | 439 | 46 | 285 | 107 | 1 | 0 |
| 2023 | 121 | 9 | 16 | 1 | 0 | 95 |
| 2022 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2021 | 1 | 1 | 0 | 0 | 0 | 0 |
| 2020 | 1 | 1 | 0 | 0 | 0 | 0 |
| 2019 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2018 | 1 | 1 | 0 | 0 | 0 | 0 |
Top products
| Product | Total | Critical/High |
|---|---|---|
| CH22 | 42 | 40 |
| AC15 | 34 | 28 |
| FH1202 | 32 | 21 |
| fh1206_firmware | 32 | 20 |
| F453 | 30 | 28 |
| AC18 | 29 | 23 |
| AC7 | 29 | 27 |
| F456 | 28 | 27 |
| AC10U | 25 | 12 |
| fh1201_firmware | 24 | 12 |
Top bug types
| Bug type | Total | Critical/High |
|---|---|---|
| Memory Corruption | 538 | 518 |
| Stack-based Buffer Overflow | 335 | 255 |
| Command Injection | 91 | 48 |
| Improper Access Control | 12 | 2 |
| Hard-coded Credentials | 11 | 5 |
| Denial of Service | 10 | 6 |
| Authentication Issues | 9 | 8 |
| Cross-Site Request Forgery | 6 | 0 |
| Path Traversal | 6 | 6 |
| Code Injection | 4 | 4 |
Known to be attacked
| CVE | Title | Published | Severity | EPSS |
|---|---|---|---|---|
| CVE-2021-31755 | Tenda AC11 Router Stack Buffer Overflow Vulnerability | Critical | 86.5% | |
| CVE-2020-10987 | Tenda AC1900 Router AC15 Model Remote Code Execution Vulnerability | Critical | 79.8% | |
| CVE-2018-14558 | Tenda AC7, AC9, and AC10 Routers Command Injection Vulnerability | Critical | 8.5% |
Newest vulnerabilities
| CVE | Title | Published | Severity | EPSS |
|---|---|---|---|---|
| CVE-2026-123966 | Tenda AC19 saveParentControlInfo heap-based overflow | Critical | 1.0% | |
| CVE-2026-118238 | CVE-2026-118238 | High | 1.5% | |
| CVE-2026-115797 | Tenda F6 Web Management cleartext transmission | Low | 0.2% | |
| CVE-2026-115796 | Tenda F6 Web Management cross-site request forgery | Medium | 0.2% | |
| CVE-2026-114268 | Tenda BE3L Pro WifiBasicSet formWifiBasicSet buffer overflow | Critical | 0.5% | |
| CVE-2026-113744 | Tenda AC19 httpd Web Management Service SetFirewallCfg formSetFirewallCfg stack-based overflow | Critical | 0.6% | |
| CVE-2026-105778 | Tenda AC5 Wifi setWifi stack-based overflow | Critical | 0.5% | |
| CVE-2026-104611 | Tenda AC9 POST Request fast_setting_internet_set stack-based overflow | Critical | 0.5% | |
| CVE-2026-104610 | Tenda HG7/HG9/HG10 Boa Web Server formLoopBack boaGetVar stack-based overflow | Critical | 0.6% | |
| CVE-2026-90689 | Tenda W20E formDelWebAuthWhiteUser stack-based overflow | High | 0.9% |