Your Tenda Router Could Have a Hidden Firmware Backdoor - Disable This Setting ASAP

These popular Tenda routers have an unpatched security backdoor which could give hackers access

CERT/CC discloses CVE‑2026‑11405, a critical 9.8/10 flaw in multiple Tenda router families caused by a hardcoded backdoor credentialAttackers can bypass normal login checks and gain full admin access with the hidden password, regardless of configured username or passwordTenda has not responded; CERT/CC advises disabling remote web management and limiting local exposure, though these are only partial mitigationsMultiple Tenda router families carr…

Your Tenda router could have a hidden firmware backdoor - disable this setting ASAP

Until Tenda patches the backdoor to its popular routers, you have one defense option.

Backdoor Found in the Firmware for These Wi-Fi Routers. And There's No Patch

A vulnerability report warns that five versions of Tenda firmware contain an 'undocumented authentication backdoor' that a hacker could use to gain full admin access over an affected router.

CVE-2026-11405: CERT Warns Of Tenda Firmware Backdoor

The CERT Coordination Center (CERT/CC) has disclosed a critical security issue affecting multiple Tenda networking devices. Tracked as CVE-2026-11405, the vulnerability stems from an undocumented backdoor in Tenda firmware that allows unauthenticated attackers to gain administrative access to a device’s web management interface. The flaw remains unpatched, prompting CERT to recommend immediate mitigation measures for affected users.  According t…

Critical Tenda Router Backdoor Leaves Multiple Models Vulnerable to Admin Access

CERT/CC has disclosed CVE-2026-11405, a critical firmware vulnerability affecting several Tenda routers. The undocumented authentication backdoor allows attackers to gain administrator access without using the configured login credentials.