Name: Vietnam CyStack Joint Stock Company
Address: Tan Hong Ha Complex, 317 Truong Chinh Street, Hanoi, Vietnam, 100000, VN
Telephone: (+84) 247 109 9656
Price range: Negotiable

Products & ServicesProducts & Services
SolutionsSolutions
PricingPricing
CompanyCompany
ResourcesResources

VulnScan

Tenda Security Vulnerabilities | CyStack CVE Database

Vulnerability	Exploitation status	Fix	Affected product	Published	Severity

`CVE-2026-104611`Tenda AC9 POST Request fast_setting_internet_set stack-based overflow	Exploitation statusPublic exploit	FixNot confirmed	Affected productAC9	Published10/02/2026	SeverityCritical
`CVE-2026-104610`Tenda HG7/HG9/HG10 Boa Web Server formLoopBack boaGetVar stack-based overflow	Exploitation statusPublic exploit	FixNot confirmed	Affected productHG7	Published10/02/2026	SeverityCritical
`CVE-2026-90689`Tenda W20E formDelWebAuthWhiteUser stack-based overflow	Exploitation statusNot known exploited	FixNot confirmed	Affected productW20E	Published09/14/2026	SeverityHigh
`CVE-2026-90688`Tenda W20E HTTP formIPMacBindAdd stack-based overflow	Exploitation statusPublic exploit	FixNot confirmed	Affected productW20E	Published09/14/2026	SeverityHigh
`CVE-2026-86300`Tenda AC9 Web Management R7WebsSecurityHandler improper authentication	Exploitation statusPublic exploit	FixNot confirmed	Affected productAC9	Published09/07/2026	SeverityMedium
`CVE-2026-86167`Tenda HG10 Boa formgponConf os command injection	Exploitation statusPublic exploit	FixNot confirmed	Affected productHG10	Published09/06/2026	SeverityCritical
`CVE-2026-86166`Tenda HG10 Boa Web Server formWanRedirect buffer overflow	Exploitation statusPublic exploit	FixNot confirmed	Affected productHG10	Published09/06/2026	SeverityHigh
`CVE-2026-86165`Tenda HG10 formURL buffer overflow	Exploitation statusPublic exploit	FixNot confirmed	Affected productHG10	Published09/06/2026	SeverityCritical
`CVE-2026-86153`Tenda CP3 Redirect.cpp SetRedirectEnable privileges management	Exploitation statusNot known exploited	FixNot confirmed	Affected productCP3	Published09/06/2026	SeverityCritical
`CVE-2026-86152`Tenda CP3 Kylin AutoAddWifi.cpp ThreadProc os command injection	Exploitation statusNot known exploited	FixNot confirmed	Affected productCP3	Published09/06/2026	SeverityCritical
`CVE-2026-86151`Tenda CP3 Network Configuration Management system.c sub_2F77E8 os command injection	Exploitation statusPublic exploit	FixNot confirmed	Affected productCP3	Published09/05/2026	SeverityCritical
`CVE-2026-86150`Tenda CP3 hostapd hard-coded credentials	Exploitation statusNot known exploited	FixNot confirmed	Affected productCP3	Published09/05/2026	SeverityMedium
`CVE-2026-86149`Tenda CP3 NetCheckPing.cpp os command injection	Exploitation statusNot known exploited	FixNot confirmed	Affected productCP3	Published09/05/2026	SeverityCritical
`CVE-2026-86148`Tenda CP3 Kylin system.c SystemAsh os command injection	Exploitation statusNot known exploited	FixNot confirmed	Affected productCP3	Published09/05/2026	SeverityCritical
`CVE-2026-85110`Tenda HG10 Boa Web Server formWlanSetup buffer overflow	Exploitation statusPublic exploit	FixNot confirmed	Affected productHG10	Published09/03/2026	SeverityHigh
`CVE-2026-85109`Tenda HG10 Boa Web Server formLogin buffer overflow	Exploitation statusPublic exploit	FixNot confirmed	Affected productHG10	Published09/03/2026	SeverityCritical
`CVE-2026-82695`Tenda AC18 Telnet telnet missing authentication	Exploitation statusPublic exploit	FixNot confirmed	Affected productAC18	Published08/31/2026	SeverityCritical
`CVE-2026-82694`Tenda AC1206 Web UI ate R7WebsSecurityHandler missing authentication	Exploitation statusPublic exploit	FixNot confirmed	Affected productAC1206	Published08/31/2026	SeverityCritical
`CVE-2026-82693`Tenda AC1206 Web UI telnet TendaTelnet missing authentication	Exploitation statusPublic exploit	FixNot confirmed	Affected productAC1206	Published08/31/2026	SeverityCritical
`CVE-2026-82542`Tenda HG10 Boa Web Server formIPv6Routing buffer overflow	Exploitation statusPublic exploit	FixNot confirmed	Affected productHG10	Published08/30/2026	SeverityCritical
`CVE-2026-78141`Tenda CH22 exeCommand formexeCommand command injection	Exploitation statusPublic exploit	FixNot confirmed	Affected productCH22	Published08/23/2026	SeverityMedium
`CVE-2026-78063`Tenda CH22 editFileName formeditFileName command injection	Exploitation statusPublic exploit	FixNot confirmed	Affected productCH22	Published08/23/2026	SeverityMedium
`CVE-2026-77031`Tenda CH22 formcreateFileName command injection	Exploitation statusPublic exploit	FixNot confirmed	Affected productCH22	Published08/20/2026	SeverityMedium
`CVE-2026-19924`Tenda AC10 httpd R7WebsSecurityHandler improper authentication	Exploitation statusPublic exploit	FixNot confirmed	Affected productAC10	Published08/16/2026	SeverityCritical
`CVE-2026-19824`Tenda W20E addIpMacBind ipMacBindListStore stack-based overflow	Exploitation statusPublic exploit	FixNot confirmed	Affected productW20E	Published08/14/2026	SeverityHigh
`CVE-2026-19823`Tenda W20E QoS Rule Deletion delQos formQOSRuleDel stack-based overflow	Exploitation statusPublic exploit	FixNot confirmed	Affected productW20E	Published08/14/2026	SeverityHigh
`CVE-2026-19822`Tenda W20E QoS Edit editQos lstAdd stack-based overflow	Exploitation statusPublic exploit	FixNot confirmed	Affected productW20E	Published08/14/2026	SeverityHigh
`CVE-2026-19821`Tenda AC12 httpd web management interface SetSysAutoRebbotCfg formSetRebootTimer buffer overflow	Exploitation statusPublic exploit	FixNot confirmed	Affected productAC12	Published08/14/2026	SeverityHigh
`CVE-2026-19792`Tenda G0 httpd web management interface module setPortMapping buffer overflow	Exploitation statusPublic exploit	FixNot confirmed	Affected productG0	Published08/14/2026	SeverityHigh
`CVE-2026-19791`Tenda G0 httpd web management interface module addStaticRoute stack-based overflow	Exploitation statusPublic exploit	FixNot confirmed	Affected productG0	Published08/14/2026	SeverityHigh
`CVE-2026-19790`Tenda G0 httpd Web Management module formSetPortMirror stack-based overflow	Exploitation statusPublic exploit	FixNot confirmed	Affected productG0	Published08/14/2026	SeverityHigh
`CVE-2026-19789`Tenda AC1206 httpd web management interface WifiGuestSet set_wl_guest_iplist stack-based overflow	Exploitation statusPublic exploit	FixNot confirmed	Affected productAC1206	Published08/14/2026	SeverityHigh
`CVE-2026-19788`Tenda AC1206 httpd web management interface SetOnlineDevName set_device_name stack-based overflow	Exploitation statusPublic exploit	FixNot confirmed	Affected productAC1206	Published08/14/2026	SeverityHigh
`CVE-2026-19750`Tenda CH/CP/TX3 SSH hard-coded password	Exploitation statusPublic exploit	FixNot confirmed	Affected productCH	Published08/13/2026	SeverityCritical
`CVE-2026-19749`Tenda CH7 RTSP/ONVIF missing authentication	Exploitation statusPublic exploit	FixNot confirmed	Affected productCH7	Published08/13/2026	SeverityMedium
`CVE-2026-19748`Tenda CH7 Kylin Web Service CWebSessionManager_ParseSession entropy	Exploitation statusPublic exploit	FixNot confirmed	Affected productCH7	Published08/13/2026	SeverityMedium
`CVE-2026-19747`Tenda CH7 ATE Module Kylin HandleCmd command injection	Exploitation statusPublic exploit	FixNot confirmed	Affected productCH7	Published08/13/2026	SeverityCritical
`CVE-2026-19346`Tenda CH22 CertListInfo formCertListInfo command injection	Exploitation statusPublic exploit	FixNot confirmed	Affected productCH22	Published08/09/2026	SeverityHigh
`CVE-2026-16248`Tenda AC10 httpd/netctrl AdvSetLanip fromAdvSetLanip stack-based overflow	Exploitation statusPublic exploit	FixNot confirmed	Affected productAC10	Published07/20/2026	SeverityHigh
`CVE-2026-15696`Tenda BE12 Pro VirtualSer fromVirtualSer stack-based overflow	Exploitation statusPublic exploit	FixNot confirmed	Affected productBE12 Pro	Published07/14/2026	SeverityHigh
`CVE-2026-15695`Tenda BE12 Pro DhcpListClient fromDhcpListClient stack-based overflow	Exploitation statusPublic exploit	FixNot confirmed	Affected productBE12 Pro	Published07/14/2026	SeverityHigh
`CVE-2026-15694`Tenda BE12 Pro SetIpBind fromSetIpBind stack-based overflow	Exploitation statusPublic exploit	FixNot confirmed	Affected productBE12 Pro	Published07/14/2026	SeverityHigh
`CVE-2026-15693`Tenda BE12 Pro SafeMacFilter fromSafeMacFilter stack-based overflow	Exploitation statusPublic exploit	FixNot confirmed	Affected productBE12 Pro	Published07/14/2026	SeverityHigh
`CVE-2026-15692`Tenda BE12 Pro SafeUrlFilter fromSafeUrlFilter stack-based overflow	Exploitation statusPublic exploit	FixNot confirmed	Affected productBE12 Pro	Published07/14/2026	SeverityHigh
`CVE-2026-15691`Tenda BE12 Pro SafeClientFilter fromSafeClientFilter stack-based overflow	Exploitation statusPublic exploit	FixNot confirmed	Affected productBE12 Pro	Published07/14/2026	SeverityHigh
`CVE-2026-15543`Tenda CH22 CertListInfo formCertListInfo buffer overflow	Exploitation statusPublic exploit	FixNot confirmed	Affected productCH22	Published07/13/2026	SeverityHigh
`CVE-2026-11405`Hidden backdoor authentication mechanism in multiple versions of Tenda firmware allows admin access to web management interface	Exploitation statusNot known exploited	FixNot confirmed	Affected productfirmware	Published07/06/2026	SeverityCritical
`CVE-2026-13519`Tenda JD12L NatStaticSetting fromNatStaticSetting stack-based overflow	Exploitation statusPublic exploit	FixNot confirmed	Affected productJD12L	Published06/29/2026	SeverityHigh
`CVE-2026-13518`Tenda JD12L addressNat fromAddressNat stack-based overflow	Exploitation statusPublic exploit	FixNot confirmed	Affected productJD12L	Published06/29/2026	SeverityHigh
`CVE-2026-13517`Tenda JD12L WifiBasicSet formWifiBasicSet stack-based overflow	Exploitation statusPublic exploit	FixNot confirmed	Affected productJD12L	Published06/29/2026	SeverityHigh
`CVE-2026-13516`Tenda JD12L WifiGuestSet fromSetWifiGusetBasic stack-based overflow	Exploitation statusPublic exploit	FixNot confirmed	Affected productJD12L	Published06/28/2026	SeverityHigh
`CVE-2026-13515`Tenda JD12L SetPptpServerCfg formSetPPTPServer stack-based overflow	Exploitation statusPublic exploit	FixNot confirmed	Affected productJD12L	Published06/28/2026	SeverityHigh
`CVE-2026-11557`Tenda F451 Web Management Natlimit fromNatlimit stack-based overflow	Exploitation statusPublic exploit	FixNot confirmed	Affected productF451	Published06/08/2026	SeverityHigh
`CVE-2026-11556`Tenda F451 Web Management WriteFacMac formWriteFacMac os command injection	Exploitation statusPublic exploit	FixNot confirmed	Affected productF451	Published06/08/2026	SeverityHigh
`CVE-2026-11553`Tenda HG7/HG9/HG10 formPPPEdit stack-based overflow	Exploitation statusPublic exploit	FixNot confirmed	Affected productHG7	Published06/08/2026	SeverityHigh
`CVE-2026-11528`Tenda AC18 Web Management getRebootStatus sub_45304 stack-based overflow	Exploitation statusPublic exploit	FixNot confirmed	Affected productAC18	Published06/08/2026	SeverityHigh
`CVE-2026-11524`Tenda W20E Web Management modifyWifiFilterRules stack-based overflow	Exploitation statusPublic exploit	FixNot confirmed	Affected productW20E	Published06/08/2026	SeverityHigh
`CVE-2026-11523`Tenda W20E Web Management PortalAuth formPortalAuth stack-based overflow	Exploitation statusPublic exploit	FixNot confirmed	Affected productW20E	Published06/08/2026	SeverityHigh
`CVE-2026-11522`Tenda W20E setPortMirror formSetPortMirror stack-based overflow	Exploitation statusPublic exploit	FixNot confirmed	Affected productW20E	Published06/08/2026	SeverityHigh
`CVE-2026-11504`Tenda CX12L Wi-Fi Schedule Configuration Endpoint openSchedWifi setSchedWifi stack-based overflow	Exploitation statusPublic exploit	FixNot confirmed	Affected productCX12L	Published06/08/2026	SeverityHigh
`CVE-2026-11503`Tenda CX12L Wi-Fi Configuration Endpoint fast_setting_wifi_set form_fast_setting_wifi_set stack-based overflow	Exploitation statusPublic exploit	FixNot confirmed	Affected productCX12L	Published06/08/2026	SeverityHigh
`CVE-2026-11499`Tenda HG7/HG9/HG10 formDOMAINBLK stack-based overflow	Exploitation statusNot known exploited	FixNot confirmed	Affected productHG7	Published06/08/2026	SeverityCritical
`CVE-2026-11498`Tenda HG7/HG9/HG10 Web Management voip_other_set asp_voip_OtherSet stack-based overflow	Exploitation statusNot known exploited	FixNot confirmed	Affected productHG7	Published06/08/2026	SeverityHigh
`CVE-2026-11493`Tenda AC15 Samba smb.conf weak password	Exploitation statusPublic exploit	FixNot confirmed	Affected productAC15	Published06/08/2026	SeverityLow
`CVE-2026-10192`Tenda W12 httpd set_local_time_0 stack-based overflow	Exploitation statusPublic exploit	FixNot confirmed	Affected productW12	Published05/31/2026	SeverityHigh
`CVE-2026-10191`Tenda W12 httpd cgiWifiMacFilterSet stack-based overflow	Exploitation statusPublic exploit	FixNot confirmed	Affected productW12	Published05/31/2026	SeverityHigh
`CVE-2026-10190`Tenda W12 Web Management httpd cgiSysWebTimeoutSet denial of service	Exploitation statusPublic exploit	FixNot confirmed	Affected productW12	Published05/31/2026	SeverityHigh
`CVE-2026-10189`Tenda W12 httpd cgiSysTimeInfoSet stack-based overflow	Exploitation statusPublic exploit	FixNot confirmed	Affected productW12	Published05/31/2026	SeverityHigh
`CVE-2026-10188`Tenda W12 httpd cgistaKickOff stack-based overflow	Exploitation statusPublic exploit	FixNot confirmed	Affected productW12	Published05/31/2026	SeverityHigh
`CVE-2026-9431`Tenda F1202 PptpUserAdd fromPptpUserAdd stack-based overflow	Exploitation statusPublic exploit	FixNot confirmed	Affected productF1202	Published05/25/2026	SeverityHigh
`CVE-2026-9430`Tenda F1202 GstDhcpSetSerof formGstDhcpSetSer stack-based overflow	Exploitation statusPublic exploit	FixNot confirmed	Affected productF1202	Published05/25/2026	SeverityHigh
`CVE-2026-9429`Tenda F1202 WrlExtraSet formWrlExtraSet stack-based overflow	Exploitation statusPublic exploit	FixNot confirmed	Affected productF1202	Published05/25/2026	SeverityHigh
`CVE-2026-9428`Tenda F1202 PPTPUserSetting fromPPTPUserSetting stack-based overflow	Exploitation statusPublic exploit	FixNot confirmed	Affected productF1202	Published05/25/2026	SeverityHigh
`CVE-2026-9389`Tenda F456 L7Im frmL7ImForm buffer overflow	Exploitation statusPublic exploit	FixNot confirmed	Affected productF456	Published05/24/2026	SeverityHigh
`CVE-2026-8265`Tenda AC6 httpd getLogFile get_log_file os command injection	Exploitation statusPublic exploit	FixNot confirmed	Affected productAC6	Published05/11/2026	SeverityMedium
`CVE-2026-8264`Tenda AC6 httpd WifiApScan formWifiApScan os command injection	Exploitation statusPublic exploit	FixNot confirmed	Affected productAC6	Published05/11/2026	SeverityMedium
`CVE-2026-8263`Tenda AC6 httpd WifiExtraSet fromSetWirelessRepeat os command injection	Exploitation statusPublic exploit	FixNot confirmed	Affected productAC6	Published05/11/2026	SeverityMedium
`CVE-2026-8259`Tenda AC6 httpd telnet os command injection	Exploitation statusPublic exploit	FixNot confirmed	Affected productAC6	Published05/11/2026	SeverityMedium
`CVE-2026-8138`Tenda CX12L SetPptpServerCfg” formSetPPTPServer stack-based overflow	Exploitation statusPublic exploit	FixNot confirmed	Affected productCX12L	Published05/08/2026	SeverityHigh
`CVE-2026-7470`Tenda 4G300 SafeMacFilter sub_427C3C stack-based overflow	Exploitation statusPublic exploit	FixNot confirmed	Affected product4G300	Published04/30/2026	SeverityHigh
`CVE-2026-7469`Tenda 4G300 DelFil sub_425A28 command injection	Exploitation statusPublic exploit	FixNot confirmed	Affected product4G300	Published04/30/2026	SeverityMedium
`CVE-2018-25318`Tenda FH303/A300 V5.07.68_EN Cookie Session Weakness DNS Change	Exploitation statusPublic exploit	FixNot confirmed	Affected productFH303/A300	Published04/29/2026	SeverityCritical
`CVE-2018-25317`Tenda W3002R/A302/W309R V5.07.64_en Cookie Session Weakness DNS Change	Exploitation statusPublic exploit	FixNot confirmed	Affected productW3002R	Published04/29/2026	SeverityCritical
`CVE-2018-25316`Tenda W308R v2 V5.07.48 Cookie Session Weakness DNS Change	Exploitation statusPublic exploit	FixNot confirmed	Affected productW308R v2	Published04/29/2026	SeverityCritical
`CVE-2026-7160`Tenda HG3 formTracert command injection	Exploitation statusPublic exploit	FixNot confirmed	Affected productHG3	Published04/27/2026	SeverityHigh
`CVE-2026-7151`Tenda HG3 formIPv6Routing formUploadConfig stack-based overflow	Exploitation statusPublic exploit	FixNot confirmed	Affected productHG3	Published04/27/2026	SeverityHigh
`CVE-2026-7119`Tenda HG3 formCountrystr os command injection	Exploitation statusPublic exploit	FixNot confirmed	Affected productHG3	Published04/27/2026	SeverityHigh
`CVE-2026-7102`Tenda F456 httpd WriteFacMac FromWriteFacMac command injection	Exploitation statusPublic exploit	FixNot confirmed	Affected productF456	Published04/27/2026	SeverityMedium
`CVE-2026-7101`Tenda F456 httpd WrlclientSet fromWrlclientSet buffer overflow	Exploitation statusPublic exploit	FixNot confirmed	Affected productF456	Published04/27/2026	SeverityHigh
`CVE-2026-7100`Tenda F456 httpd Natlimit fromNatlimitof buffer overflow	Exploitation statusPublic exploit	FixNot confirmed	Affected productF456	Published04/27/2026	SeverityHigh
`CVE-2026-7099`Tenda F456 httpd QuickIndex formQuickIndex buffer overflow	Exploitation statusPublic exploit	FixNot confirmed	Affected productF456	Published04/27/2026	SeverityHigh
`CVE-2026-7098`Tenda F456 httpd DhcpListClient fromDhcpListClient buffer overflow	Exploitation statusPublic exploit	FixNot confirmed	Affected productF456	Published04/27/2026	SeverityHigh
`CVE-2026-7097`Tenda F456 httpd webExcptypemanFilter fromwebExcptypemanFilter buffer overflow	Exploitation statusPublic exploit	FixNot confirmed	Affected productF456	Published04/27/2026	SeverityHigh
`CVE-2026-7096`Tenda HG3 formgponConf os command injection	Exploitation statusPublic exploit	FixNot confirmed	Affected productHG3	Published04/27/2026	SeverityHigh
`CVE-2026-7082`Tenda F456 httpd WrlExtraSet formWrlExtraSet buffer overflow	Exploitation statusPublic exploit	FixNot confirmed	Affected productF456	Published04/27/2026	SeverityHigh
`CVE-2026-7081`Tenda F456 httpd GstDhcpSetSer fromGstDhcpSetSer buffer overflow	Exploitation statusPublic exploit	FixNot confirmed	Affected productF456	Published04/27/2026	SeverityHigh
`CVE-2026-7080`Tenda F456 httpd PPTPUserSetting fromPPTPUserSetting buffer overflow	Exploitation statusPublic exploit	FixNot confirmed	Affected productF456	Published04/27/2026	SeverityHigh
`CVE-2026-7079`Tenda F456 httpd AdvSetWan fromAdvSetWan buffer overflow	Exploitation statusPublic exploit	FixNot confirmed	Affected productF456	Published04/27/2026	SeverityHigh
`CVE-2026-7078`Tenda F456 httpd SetIpBind fromSetIpBind buffer overflow	Exploitation statusPublic exploit	FixNot confirmed	Affected productF456	Published04/27/2026	SeverityHigh
`CVE-2026-7057`Tenda F456 httpd setcfm buffer overflow	Exploitation statusPublic exploit	FixNot confirmed	Affected productF456	Published04/26/2026	SeverityHigh