First reported by thehackernews.com
CERT/CC Warns of Hidden Admin Backdoor in Tenda Router Firmware
CERT/CC Warns of Hidden Admin Backdoor in Tenda Router Firmware
By
admin
13h agoen
Source
Several versions of firmware released by Chinese network device manufacturer Tenda have been found to embed an undocumented authentication backdoor that enables administrative access to the devices’ web management interfaces, the CERT Coordination Center (CERT/CC) warned Monday. “An attacker can exploit this vulnerability, tracked as CVE-2026-11405, to bypass the password verification process The Hacker News […]
You might also wanna read
CERT/CC Warns of Hidden Admin Backdoor in Tenda Router Firmware
thehackernews.com·15h ago
Hidden backdoor in Tenda router firmware grants admin access
BleepingComputer·4h ago
CVE-2026-5667: Unauthenticated Remote Control Vulnerability in Mitsubishi MAC-577IF-2E WiFi Air Conditioner Adapters
A security researcher discovered CVE-2026-5667, a critical vulnerability in Mitsubishi MAC-577IF-2E WiFi adapters used in air conditioners.
GNU IFUNC, Not xz-utils, Is the Real Culprit Behind CVE-2024-3094 Backdoor
This article argues that the real culprit behind CVE-2024-3094 (the xz-utils backdoor) is not the malicious code injection itself, but rathe

CVE-2026-11462: Improper Authorization Vulnerability in BeikeShop Stripe Plugin (Up to v1.6.0.22)
A security vulnerability (CVE-2026-11462) has been discovered in Chengdu Everbrite Network Technology's BeikeShop e-commerce platform up to
Critical Authentication Bypass Vulnerability Discovered in cPanel & WHM (CVE-2026-41940)
watchTowr Labs reports on a critical authentication bypass vulnerability (CVE-2026-41940) in cPanel & WHM, a widely-used web hosting control
watchTowr Labs·2mo ago
Comments
Sign in to join the conversation.
No comments yet. Be the first.