Controversies
Controversies tied to this brand in public sources. A listing is not a finding of fault.
Back to profile1 entries
2026
Multiple Router Firmwares Found to Contain Hidden Authentication Backdoor
CVE-2026-11405: In the firmware of discontinued routers including Tenda FH1201, W15E, AC10, AC5, and AC6, the httpd login logic, after normal verification fails, compares against a hidden sys.rzadmin.password; a match grants administrator privileges without checking the username, constituting an undisclosed authentication backdoor. Tenda issued a statement and released fixed firmware.