Vendor

Tenda

3 of 15 Tenda CVEs in Patchfirst (20%) are in of vulnerabilities exploited in the wild.

CVEs: 15
In CISA KEV: 320%
Known ransomware use: 0
Median days to KEV: 478; from publication
Latest KEV listing: 3 Nov 2021

Watch Tenda Subscribe (RSS) JSON Feed All feeds

Products

In KEVOther CVEs

ProductKEVCVEs
AC11 Router In KEV: 1 CVEs: 1
AC1900 Router AC15 Model In KEV: 1 CVEs: 1
AC7, AC9, and AC10 Routers In KEV: 1 CVEs: 1
CH22 In KEV: 0 CVEs: 2
O3V2 In KEV: 0 CVEs: 2
AC1206 In KEV: 0 CVEs: 1
AC15 In KEV: 0 CVEs: 1
AC19 In KEV: 0 CVEs: 1
AC20 In KEV: 0 CVEs: 1
AC5 In KEV: 0 CVEs: 1

Top ATT&CK techniques

What attackers do with Tenda CVEs

TechniqueCVEs
T1190Exploit Public-Facing Application CVEs: 3
T1059Command and Scripting Interpreter CVEs: 3

Open in ATT&CK Navigator

A layer for MITRE’s ATT&CK Navigator: techniques scored by the highest Patchfirst priority among their CVEs, neutral to red, with the CVE ids in each comment. “Open in Navigator” loads https://patchfirst.co/navigator/vendor/tenda.json. Or download it and in Navigator choose Open Existing Layer → Upload from local.

Counts are Tenda CVEs linked to the technique. Each link’s provenance is on the CVE page.

Tenda CVEs

15 CVEs, by priority

CVE-2026-5153Tenda CH22 WriteFacMac FormWriteFacMac command injection
Tenda · CH22Public exploitMedium · 6.3
3.4%Top 11%
74.3priority
CVE-2025-9090Tenda AC20 Telnet Service telnet websFormDefine command injection
Tenda · AC20Public exploitMedium · 6.3
16.7%Top 3%
73.8priority
CVE-2020-10987Tenda AC1900 Router AC15 Model Remote Code Execution Vulnerability
Tenda · AC1900 Router AC15 ModelKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing Application T1059Command and Scripting Interpreter1 report
79.8%Top 0.39%
73.7priority
CVE-2024-2851Tenda AC15 setsambacfg formSetSambaConf os command injection
Tenda · AC15Public exploitMedium · 6.3
4.0%Top 9.5%
72.5priority
CVE-2026-78141Tenda CH22 exeCommand formexeCommand command injection
Tenda · CH22Public exploitHigh · 7.4
2.7%Top 14%
72.4priority
CVE-2021-31755Tenda AC11 Router Stack Buffer Overflow Vulnerability
Tenda · AC11 RouterKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing Application T1059Command and Scripting Interpreter
86.5%Top 0.26%
69.8priority
CVE-2018-14558Tenda AC7, AC9, and AC10 Routers Command Injection Vulnerability
Tenda · AC7, AC9, and AC10 RoutersKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing Application T1059Command and Scripting Interpreter
8.5%Top 5%
68.9priority
CVE-2025-7544Tenda AC1206 setMacFilterCfg formSetMacFilterCfg stack-based overflow
Tenda · AC1206Public exploitHigh · 8.8
1.8%Top 22%
66.7priority
CVE-2025-7414Tenda O3V2 httpd setPingInfo fromNetToolGet os command injection
Tenda · O3V2Public exploitMedium · 6.3
12.6%Top 3.8%
66.2priority
CVE-2025-7417Tenda O3V2 httpd setPingInfo fromNetToolGet stack-based overflow
Tenda · O3V2Public exploitHigh · 8.8
1.0%Top 38%
63.5priority
CVE-2026-113744A security vulnerability has been detected in Tenda AC19 16.03.10.07
Tenda · AC19Critical · 10.0
0.6%Top 50%
18.9priority
CVE-2026-104610A security vulnerability has been detected in Tenda HG7, HG9 and HG10 300001138_en_xpon
Tenda · HG7Critical · 10.0
0.6%Top 49%
18.9priority
CVE-2026-114268A flaw has been found in Tenda BE3L Pro 16.03.60.62
Tenda · BE3L ProCritical · 9.9
0.5%Top 56%
17.6priority
CVE-2026-105778A vulnerability has been found in Tenda AC5 02.03.01.111_multi
Tenda · AC5Critical · 9.9
0.5%Top 59%
17.4priority
CVE-2026-104611A vulnerability was detected in Tenda AC9 15.03.02.13
Tenda · AC9Critical · 9.1
0.5%Top 58%
16.6priority