Skip to content

CyberSIXT Search

Vendor

Tenda

No CISA KEV deadline is open. CISA last added a Tenda CVE on 3 Nov 2021.

Tracked since 7 Jul · latest article Thu 9 Jul · RSS

Open KEV deadlines: 0; None open
Added to KEV · 90 days: 0; of 3 all time
High exploit odds · current: 0; high · not in KEV
Articles · 7 days: 0; usual rate

Exploited, by due date

CVEProductAddedDue · federal deadline

Deadlines passed

CVE-2021-31755not in CyberSIXT coverageAC11 Router3 Nov 2021Deadline passed 17 Nov 2021Ransomware: Unknown · 0 articles

CVE-2018-14558not in CyberSIXT coverageAC7, AC9, and AC10 Routers3 Nov 2021Deadline passed 3 May 2022Ransomware: Unknown · 0 articles

CVE-2020-10987not in CyberSIXT coverageAC1900 Router AC15 Model3 Nov 2021Deadline passed 3 May 2022Ransomware: Unknown · 0 articles

Products

4 products · 1 CVEs in coverage

AC7, AC9, and AC10 Routers0 CVEs · 1 in KEV AC1900 Router AC15 Model0 CVEs · 1 in KEV AC11 Router0 CVEs · 1 in KEV firmware1 CVEs · 0 in KEVlatest 9 Jul

Coverage

3 articles · all timeFull timeline →

Three articles so far, 7 Jul to 9 Jul.

Tue 7 Jul · first reportTenda routers hit by CVE-2026-11405 backdoor giving admin controlSecurityOnline
Tue 7 JulHidden Tenda Router Backdoor Grants Admin Access, No Patch AvailableSecurity Affairs
Thu 9 JulUnpatched Backdoor in Tenda Firmware Grants Admin Access to DevicesSecurityWeek

See the full timeline

9 JulUnpatched Backdoor in Tenda Firmware Grants Admin Access to DevicesSecurityWeek
7 JulHidden Tenda Router Backdoor Grants Admin Access, No Patch AvailableSecurity Affairs
7 JulTenda routers hit by CVE-2026-11405 backdoor giving admin controlSecurityOnline

All CVEs in coverage

1

CVE-2026-11405Hidden backdoor authentication mechanism in multiple versions of Tenda firmware allows admin access to web management interfaceCVSS9.8Critical–Not in KEV0.8%EPSS3articles

How these numbers are made

CISA KEV counts use the full catalogue, refreshed every 10 minutes. CVEs in coverage are those recorded by CyberSIXT. BOD 22-01 deadlines bind US federal civilian agencies.

CVEs with FIRST EPSS at or above the 95th percentile (top 5%), excluding CVEs in CISA KEV. EPSS estimates exploitation probability over the next 30 days.

Coverage is above its usual rate at three or more articles in 7 days and at least 2.5 times the weekly mean of the preceding 8 weeks.

Product names are grouped by normalised names, with version and edition tails removed.

Fix listed refers to an advisory. Unknown fix status is counted as not listed.