Tenda product

firmware

← All Tenda products

No firmware CVE is in the CISA KEV catalogue.

Tracked since 7 Jul · latest article Thu 9 Jul · RSS

Open KEV deadlines: 0; None open
Added to KEV · 90 days: 0; of 0 all time
High exploit odds · current: 0; high · not in KEV
Articles · 7 days: 0; usual rate

Exploited, by due date

CSV download

No firmware CVE is in the CISA KEV catalogue.

Coverage

3 articles · all timeFull timeline →

Three articles so far, 7 Jul to 9 Jul.

1 2 3

Tue 7 Jul · first reportTenda routers hit by CVE-2026-11405 backdoor giving admin controlSecurityOnline
Tue 7 JulHidden Tenda Router Backdoor Grants Admin Access, No Patch AvailableSecurity Affairs
Thu 9 JulUnpatched Backdoor in Tenda Firmware Grants Admin Access to DevicesSecurityWeek

See the full timeline

9 JulUnpatched Backdoor in Tenda Firmware Grants Admin Access to DevicesSecurityWeek
7 JulHidden Tenda Router Backdoor Grants Admin Access, No Patch AvailableSecurity Affairs
7 JulTenda routers hit by CVE-2026-11405 backdoor giving admin controlSecurityOnline

All CVEs in coverage

CVE-2026-11405Hidden backdoor authentication mechanism in multiple versions of Tenda firmware allows admin access to web management interfaceCVSS9.8Critical–Not in KEV0.8%EPSS3articles

How these numbers are made

CISA KEV counts use the full catalogue, refreshed every 10 minutes. CVEs in coverage are those recorded by CyberSIXT. BOD 22-01 deadlines bind US federal civilian agencies.

CVEs with FIRST EPSS at or above the 95th percentile (top 5%), excluding CVEs in CISA KEV. EPSS estimates exploitation probability over the next 30 days.

Coverage is above its usual rate at three or more articles in 7 days and at least 2.5 times the weekly mean of the preceding 8 weeks.

Product names are grouped by normalised names, with version and edition tails removed.

Fix listed refers to an advisory. Unknown fix status is counted as not listed.

firmware

Exploited, by due date

Coverage

All CVEs in coverage

On this device

Intel

Settings

Keyboard shortcuts