Tenda has 38 CVEs on record between 2022 and 2026. Cadence is steady at roughly 12 per quarter. The busiest recent month was September 2026 with 12. The median CVSS is 8.8 (high), with 10 rated critical. 3% have been exploited in the wild, in line with the corpus average. The dominant weakness classes are CWE-119 (16) and CWE-121 (13). Most affected products: CP3 (6), cx12l_firmware (5), ac6_firmware (4).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 3% vs 1% corpus
- Median CVSS
- 8.8
- Publish → KEV
- —
- Last 90 days
- 12 prev 15
Weakness classes
Products
- CP3 6
- cx12l_firmware 5
- ac6_firmware 4
- ch22_firmware 4
- HG10 3
- 4g03_pro_firmware 2
Worst active — by depth score
CVE-2022-30023High· 8.8Tenda ONT GPON AC1200 Dual band WiFi HG9 v1.0.1 is vulnerable to Command Injection via the Ping function.74CVE-2026-86167Critical· 9.9A vulnerability was identified in Tenda HG10 30000113867CVE-2026-86165Critical· 9.8A vulnerability was found in Tenda HG10 30000113866CVE-2026-86151Critical· 9.1A vulnerability was detected in Tenda CP3 27.5.57.10163CVE-2026-86166High· 8.8A vulnerability was determined in Tenda HG10 30000113861
Tenda vulnerabilities
CVEs affecting Tenda, newest first. Open any entry for full detail, references, and exploit status.
38 CVEsRSS
CVE-2025-9812High· 8.8A vulnerability was determined in Tenda CH22 1.0.0.1
A vulnerability was determined in Tenda CH22 1.0.0.1. This vulnerability affects the function formexeCommand of the file /goform/exeCommand. Executing manipulation of the argument cmdinput can lead to buffer overflow. The attack may be p…
CVE-2025-9791High· 8.8A weakness has been identified in Tenda AC20 16.03.08.05
A weakness has been identified in Tenda AC20 16.03.08.05. This vulnerability affects unknown code of the file /goform/fromAdvSetMacMtuWan. This manipulation of the argument wanMTU causes stack-based buffer overflow. Remote exploitation o…
CVE-2025-57220Medium· 5.3An input validation flaw in the 'ate' service of Tenda AC10 v4.0 firmware v16.03.10.09_multi_TDE01 to escalate privileges to root via a crafted UDP packet.
An input validation flaw in the 'ate' service of Tenda AC10 v4.0 firmware v16.03.10.09_multi_TDE01 to escalate privileges to root via a crafted UDP packet.
CVE-2025-57218Medium· 5.3Tenda AC10 v4.0 firmware v16.03.10.09_multi_TDE01 was discovered to contain a stack overflow via the security_5g parameter in the function sub_46284C.
Tenda AC10 v4.0 firmware v16.03.10.09_multi_TDE01 was discovered to contain a stack overflow via the security_5g parameter in the function sub_46284C.
CVE-2025-52054Medium· 5.3An issue was discovered in Tenda AC8 v4.0 AC1200 Dual-band Gigabit Wireless Router AC8v4.0 Firmware 16.03.33.05
An issue was discovered in Tenda AC8 v4.0 AC1200 Dual-band Gigabit Wireless Router AC8v4.0 Firmware 16.03.33.05. The root password of the device is calculated with a static string and the last two octets of the MAC address of the device.…
CVE-2022-35201Critical· 9.8Tenda-AC18 V15.03.05.05 was discovered to contain a remote command execution (RCE) vulnerability.
Tenda-AC18 V15.03.05.05 was discovered to contain a remote command execution (RCE) vulnerability.
CVE-2022-30023High· 8.8⚠ ExploitedPoCTenda ONT GPON AC1200 Dual band WiFi HG9 v1.0.1 is vulnerable to Command Injection via the Ping function.
Tenda ONT GPON AC1200 Dual band WiFi HG9 v1.0.1 is vulnerable to Command Injection via the Ping function.
CVE-2021-44971Critical· 9.8Multiple Tenda devices are affected by authentication bypass, such as AC15V1.0 Firmware V15.03.05.20_multi?AC5V1.0 Firmware V15.03.06.48_multi and so on
Multiple Tenda devices are affected by authentication bypass, such as AC15V1.0 Firmware V15.03.05.20_multi?AC5V1.0 Firmware V15.03.06.48_multi and so on. an attacker can obtain sensitive information, and even combine it with authenticate…