How many CVEs does Tenda have?

Tenda has 2,048 published CVE records since 2014, including 798 in the last two years.

How many Tenda CVEs are in CISA KEV?

Yes — 3 of Tenda's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Which Tenda products have the most CVEs?

The Tenda products with the most published CVEs are AC6, ac6_firmware, ac18_firmware, AC18, AC9.

What are the most common weakness types in Tenda CVEs?

Tenda's CVEs most often map to these CWE weakness types: CWE-121 (Stack-based Buffer Overflow), CWE-120 (Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')), CWE-787 (Out-of-bounds Write), CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer).

Are there public exploits for Tenda vulnerabilities?

Yes — 1,408 of Tenda's CVEs have a known public exploit.

How many critical Tenda vulnerabilities are there?

Tenda has 690 critical and 1,135 high-severity CVEs.

What is the average severity of Tenda CVEs?

The average CVSS base score across Tenda's scored CVEs is 8.5.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

2,048 CVEs

3 in CISA KEV

Tenda Vulnerabilities

Name: Tenda vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for Tenda.

2,048

Total CVEs

Published

3

In CISA KEV

Exploited in the wild

1,408

Public exploits

PoC or exploit code

8.5

Avg CVSS

2014–2026

Overview

Tenda has 2,048 published CVE records since 2014, of which 3 are in CISA's Known Exploited Vulnerabilities catalog and 1,408 have a known public exploit. The average CVSS base score across scored CVEs is 8.5.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Tenda products, with severity breakdowns, the most-affected products, the most common weakness types, and the latest disclosures.

Security scorecard

A quick read on Tenda's vulnerability posture, as a share of its 2,048 published CVEs.

Average CVSS: 8.5
Critical / high: 89%
Actively exploited (KEV): 0%
Public exploit available: 69%
Patch available: 2%

Severity and exploitation

How the CVSS severity of Tenda's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical690

High1,135

Medium212

Low10

1 additional CVE has no CVSS severity score.

In CISA’s Known Exploited Vulnerabilities catalog

3

3 of Tenda's CVEs are confirmed exploited in the wild.

Public exploits

1,408

1,408 of Tenda's CVEs have a known public exploit available.

Most affected products

The Tenda products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.

Common weakness types

The CWE weakness categories most often found in Tenda CVEs. Follow any weakness for its full explanation.

CNAs that assign these CVEs

The CVE Numbering Authorities that publish Tenda CVE records.

Disclosure activity by year

How many Tenda CVEs were published each year.

2019

6

2020

18

2021

16

2022

450

2023

258

2024

473

2025

476

2026

322

Latest Tenda CVEs

The most recently disclosed vulnerabilities affecting Tenda.

Tenda BE12 Pro VirtualSer fromVirtualSer stack-based overflow
CWE-121
High · CVSS 8.7
EPSS 0.8%2026-07-14
Tenda BE12 Pro DhcpListClient fromDhcpListClient stack-based overflow
CWE-121
High · CVSS 8.7
EPSS 0.8%2026-07-14
Tenda BE12 Pro SetIpBind fromSetIpBind stack-based overflow
CWE-121
High · CVSS 8.7
EPSS 0.8%2026-07-14
Tenda BE12 Pro SafeMacFilter fromSafeMacFilter stack-based overflow
CWE-121
High · CVSS 8.7
EPSS 0.5%2026-07-14
Tenda BE12 Pro SafeUrlFilter fromSafeUrlFilter stack-based overflow
CWE-121
High · CVSS 8.7
EPSS 0.8%2026-07-14
Tenda BE12 Pro SafeClientFilter fromSafeClientFilter stack-based overflow
CWE-121
High · CVSS 8.7
EPSS 0.8%2026-07-14
Tenda CH22 CertListInfo formCertListInfo buffer overflow
CWE-120
High · CVSS 8.7
EPSS 0.5%2026-07-13
Hidden backdoor authentication mechanism in multiple versions of Tenda firmware allows admin access to web management interface
Critical · CVSS 9.8
EPSS 0.7%2026-07-06
Tenda JD12L NatStaticSetting fromNatStaticSetting stack-based overflow
CWE-121
High · CVSS 8.7
EPSS 0.5%2026-06-29
Tenda JD12L addressNat fromAddressNat stack-based overflow
CWE-121
High · CVSS 8.7
EPSS 0.5%2026-06-29
Tenda JD12L WifiBasicSet formWifiBasicSet stack-based overflow
CWE-121
High · CVSS 8.7
EPSS 0.5%2026-06-29
Tenda JD12L WifiGuestSet fromSetWifiGusetBasic stack-based overflow
CWE-121
High · CVSS 8.7
EPSS 0.5%2026-06-28

Track new Tenda CVEs as they are disclosed and get AI-written analysis and remediation guidance.

Monitor Tenda CVEs

Other vendors

Browse vulnerabilities for other tracked vendors.

Huawei2,383 CVEs Sourcecodester2,036 CVEs Intel2,001 CVEs SAP1,898 CVEs D-Link1,847 CVEs Jenkins1,847 CVEs sun1,711 CVEs Samsung1,657 CVEs

Browse all vendors

Frequently asked questions

Common questions about Tenda vulnerabilities.

How many CVEs does Tenda have?: Tenda has 2,048 published CVE records since 2014, including 798 in the last two years.
How many Tenda CVEs are in CISA KEV?: Yes — 3 of Tenda's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Which Tenda products have the most CVEs?: The Tenda products with the most published CVEs are AC6, ac6_firmware, ac18_firmware, AC18, AC9.
What are the most common weakness types in Tenda CVEs?: Tenda's CVEs most often map to these CWE weakness types: CWE-121 (Stack-based Buffer Overflow), CWE-120 (Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')), CWE-787 (Out-of-bounds Write), CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer).
Are there public exploits for Tenda vulnerabilities?: Yes — 1,408 of Tenda's CVEs have a known public exploit.
How many critical Tenda vulnerabilities are there?: Tenda has 690 critical and 1,135 high-severity CVEs.
What is the average severity of Tenda CVEs?: The average CVSS base score across Tenda's scored CVEs is 8.5.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Tenda vulnerabilities

Monitor new Tenda vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing