<?xml version="1.0" encoding="UTF-8"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Patchfirst: Tenda vulnerabilities</title><link>https://patchfirst.co/vendor/tenda/</link><atom:link href="https://patchfirst.co/feed/vendor/tenda.xml" rel="self" type="application/rss+xml"/><description>New and newly exploited Tenda CVEs, with CISA KEV, EPSS and ATT&amp;CK context. Newest 50 by publication or KEV listing.</description><language>en-gb</language><ttl>360</ttl><lastBuildDate>Sat, 31 Oct 2026 05:11:25 GMT</lastBuildDate><item><title>CVE-2026-113744: A security vulnerability has been detected in Tenda AC19 16.03.10.07</title><link>https://patchfirst.co/cve/CVE-2026-113744/</link><guid isPermaLink="false">CVE-2026-113744</guid><pubDate>Wed, 21 Oct 2026 00:00:00 GMT</pubDate><description>Tenda · AC19. Not in CISA KEV. EPSS 0.6% (higher than 49.8% of CVEs). CVSS 10.0 CRITICAL. Priority 18.9 of 100.</description></item><item><title>CVE-2026-114268: A flaw has been found in Tenda BE3L Pro 16.03.60.62</title><link>https://patchfirst.co/cve/CVE-2026-114268/</link><guid isPermaLink="false">CVE-2026-114268</guid><pubDate>Wed, 21 Oct 2026 00:00:00 GMT</pubDate><description>Tenda · BE3L Pro. Not in CISA KEV. EPSS 0.5% (higher than 43.6% of CVEs). CVSS 9.9 CRITICAL. Priority 17.6 of 100.</description></item><item><title>CVE-2026-105778: A vulnerability has been found in Tenda AC5 02.03.01.111_multi</title><link>https://patchfirst.co/cve/CVE-2026-105778/</link><guid isPermaLink="false">CVE-2026-105778</guid><pubDate>Tue, 06 Oct 2026 00:00:00 GMT</pubDate><description>Tenda · AC5. Not in CISA KEV. EPSS 0.5% (higher than 41.1% of CVEs). CVSS 9.9 CRITICAL. Priority 17.4 of 100.</description></item><item><title>CVE-2026-104610: A security vulnerability has been detected in Tenda HG7, HG9 and HG10 300001138_en_xpon</title><link>https://patchfirst.co/cve/CVE-2026-104610/</link><guid isPermaLink="false">CVE-2026-104610</guid><pubDate>Fri, 02 Oct 2026 00:00:00 GMT</pubDate><description>Tenda · HG7. Not in CISA KEV. EPSS 0.6% (higher than 50.8% of CVEs). CVSS 10.0 CRITICAL. Priority 18.9 of 100.</description></item><item><title>CVE-2026-104611: A vulnerability was detected in Tenda AC9 15.03.02.13</title><link>https://patchfirst.co/cve/CVE-2026-104611/</link><guid isPermaLink="false">CVE-2026-104611</guid><pubDate>Fri, 02 Oct 2026 00:00:00 GMT</pubDate><description>Tenda · AC9. Not in CISA KEV. EPSS 0.5% (higher than 42.3% of CVEs). CVSS 9.1 CRITICAL. Priority 16.6 of 100.</description></item><item><title>CVE-2026-78141: Tenda CH22 exeCommand formexeCommand command injection</title><link>https://patchfirst.co/cve/CVE-2026-78141/</link><guid isPermaLink="false">CVE-2026-78141</guid><pubDate>Sun, 23 Aug 2026 00:00:00 GMT</pubDate><description>Tenda · CH22. Not in CISA KEV. EPSS 2.7% (higher than 86.2% of CVEs). CVSS 7.4 HIGH. Public exploit code exists. Priority 72.4 of 100.</description><category>public-exploit</category></item><item><title>CVE-2026-5153: Tenda CH22 WriteFacMac FormWriteFacMac command injection</title><link>https://patchfirst.co/cve/CVE-2026-5153/</link><guid isPermaLink="false">CVE-2026-5153</guid><pubDate>Mon, 30 Mar 2026 00:00:00 GMT</pubDate><description>Tenda · CH22. Not in CISA KEV. EPSS 3.4% (higher than 88.7% of CVEs). CVSS 6.3 MEDIUM. Public exploit code exists. Priority 74.3 of 100.</description><category>public-exploit</category></item><item><title>CVE-2025-9090: Tenda AC20 Telnet Service telnet websFormDefine command injection</title><link>https://patchfirst.co/cve/CVE-2025-9090/</link><guid isPermaLink="false">CVE-2025-9090</guid><pubDate>Sun, 17 Aug 2025 00:00:00 GMT</pubDate><description>Tenda · AC20. Not in CISA KEV. EPSS 16.7% (higher than 97% of CVEs). CVSS 6.3 MEDIUM. Public exploit code exists. Priority 73.8 of 100.</description><category>public-exploit</category></item><item><title>CVE-2025-7544: Tenda AC1206 setMacFilterCfg formSetMacFilterCfg stack-based overflow</title><link>https://patchfirst.co/cve/CVE-2025-7544/</link><guid isPermaLink="false">CVE-2025-7544</guid><pubDate>Sun, 13 Jul 2025 00:00:00 GMT</pubDate><description>Tenda · AC1206. Not in CISA KEV. EPSS 1.8% (higher than 77.9% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. Priority 66.7 of 100.</description><category>public-exploit</category></item><item><title>CVE-2025-7414: Tenda O3V2 httpd setPingInfo fromNetToolGet os command injection</title><link>https://patchfirst.co/cve/CVE-2025-7414/</link><guid isPermaLink="false">CVE-2025-7414</guid><pubDate>Thu, 10 Jul 2025 00:00:00 GMT</pubDate><description>Tenda · O3V2. Not in CISA KEV. EPSS 12.6% (higher than 96.2% of CVEs). CVSS 6.3 MEDIUM. Public exploit code exists. Priority 66.2 of 100.</description><category>public-exploit</category></item><item><title>CVE-2025-7417: Tenda O3V2 httpd setPingInfo fromNetToolGet stack-based overflow</title><link>https://patchfirst.co/cve/CVE-2025-7417/</link><guid isPermaLink="false">CVE-2025-7417</guid><pubDate>Thu, 10 Jul 2025 00:00:00 GMT</pubDate><description>Tenda · O3V2. Not in CISA KEV. EPSS 1.0% (higher than 61.5% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. Priority 63.5 of 100.</description><category>public-exploit</category></item><item><title>CVE-2024-2851: Tenda AC15 setsambacfg formSetSambaConf os command injection</title><link>https://patchfirst.co/cve/CVE-2024-2851/</link><guid isPermaLink="false">CVE-2024-2851</guid><pubDate>Sun, 24 Mar 2024 00:00:00 GMT</pubDate><description>Tenda · AC15. Not in CISA KEV. EPSS 4.0% (higher than 90.5% of CVEs). CVSS 6.3 MEDIUM. Public exploit code exists. Priority 72.5 of 100.</description><category>public-exploit</category></item><item><title>[KEV] CVE-2020-10987: Tenda AC1900 Router AC15 Model Remote Code Execution Vulnerability</title><link>https://patchfirst.co/cve/CVE-2020-10987/</link><guid isPermaLink="false">CVE-2020-10987#kev</guid><pubDate>Wed, 03 Nov 2021 00:00:00 GMT</pubDate><description>Tenda · AC1900 Router AC15 Model. In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS 79.8% (higher than 99.61% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&amp;CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Named in 1 threat report. Priority 73.7 of 100.</description><category>kev</category><category>public-exploit</category><category>T1190</category><category>T1059</category></item><item><title>[KEV] CVE-2021-31755: Tenda AC11 Router Stack Buffer Overflow Vulnerability</title><link>https://patchfirst.co/cve/CVE-2021-31755/</link><guid isPermaLink="false">CVE-2021-31755#kev</guid><pubDate>Wed, 03 Nov 2021 00:00:00 GMT</pubDate><description>Tenda · AC11 Router. In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS 86.5% (higher than 99.74% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&amp;CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 69.8 of 100.</description><category>kev</category><category>public-exploit</category><category>T1190</category><category>T1059</category></item><item><title>[KEV] CVE-2018-14558: Tenda AC7, AC9, and AC10 Routers Command Injection Vulnerability</title><link>https://patchfirst.co/cve/CVE-2018-14558/</link><guid isPermaLink="false">CVE-2018-14558#kev</guid><pubDate>Wed, 03 Nov 2021 00:00:00 GMT</pubDate><description>Tenda · AC7, AC9, and AC10 Routers. In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS 8.5% (higher than 95% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&amp;CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 68.9 of 100.</description><category>kev</category><category>public-exploit</category><category>T1190</category><category>T1059</category></item></channel></rss>