tenda security advisories
9 threat alerts tracking vulnerabilities and security advisories that affect tenda products.
Vulnios monitors tenda CVE feeds, vendor advisories, CISA KEV listings, and exploit-prediction data continuously. Each alert below is enriched with severity, exploitation status, affected products, and a remediation path. Use this page to scan recent tenda security news in one place, or click into an individual alert for full detail.
Critical Vulnerability: CVE-2025-52221 — tenda — ac6_firmware, ac6
Tenda AC6 15.03.05.16_multi is vulnerable to Buffer Overflow in the formSetCfm function via the funcname, funcpara1, and funcpara2 parameters.
criticalCVE-2025-52221Critical Vulnerability: CVE-2024-25343 — tenda — n300_firmware, n300
Tenda N300 F3 router vulnerability allows users to bypass intended security policy and create weak passwords.
criticalCVE-2024-25343Critical Vulnerability: CVE-2023-48194 — tenda — ac8_firmware, ac8v4
Vulnerability in Tenda AC8v4 .V16.03.34.09 due to sscanf and the last digit of s8 being overwritten with \x0. After executing set_client_qos, control over the gp register can be obtained.
criticalCVE-2023-48194Critical Vulnerability: CVE-2024-52714 — tenda — ac6_firmware, ac6
Tenda AC6 v2.0 v15.03.06.50 was discovered to contain a buffer overflow in the function 'fromSetSysTime.
criticalCVE-2024-52714Critical Vulnerability: CVE-2018-25318 — tenda — fh303_firmware, fh303
Tenda FH303/A300 firmware V5.07.68_EN contains a session weakness vulnerability that allows unauthenticated attackers to modify DNS settings by exploiting insufficient cookie validation. Attackers can
criticalCVE-2018-25318Critical Vulnerability: CVE-2018-25317 — tenda — w3002r_firmware, w3002r
Tenda W3002R/A302/W309R wireless routers version V5.07.64_en contain a cookie session weakness vulnerability that allows unauthenticated attackers to modify DNS settings by exploiting insufficient ses
criticalCVE-2018-25317Critical Vulnerability: CVE-2018-25316 — tenda — w308r_firmware, w308r
Tenda W308R v2 V5.07.48 contains a cookie session weakness vulnerability that allows unauthenticated attackers to modify DNS settings by exploiting insufficient session validation. Attackers can send
criticalCVE-2018-25316Critical Vulnerability: CVE-2026-31255 — tenda — ac18_firmware, ac18
A command injection vulnerability exists in Tenda AC18 V15.03.05.05_multi. The vulnerability is located in the /goform/SetSambaCfg interface, where improper handling of the guestuser parameter allows
criticalCVE-2026-31255Critical Vulnerability: CVE-2026-38835 — tenda — w30e_firmware, w30e
Tenda W30E V2.0 V16.01.0.21 was found to contain a command injection vulnerability in the formSetUSBPartitionUmount function via the usbPartitionName parameter. This vulnerability allows attackers to
criticalCVE-2026-38835
Track tenda exposure across your environment
Vulnios automatically cross-references your asset inventory against new tenda CVEs and surfaces only what affects you. No more sifting manually — actionable findings only.
Start a free scan