A critical security vulnerability, identified as CVE-2026-11405, has been discovered in several Tenda router firmware versions. This flaw allows attackers to bypass authentication and gain full administrative control via the web management interface. The vulnerability is embedded in the /bin/httpd binary, exploiting an undocumented password field to escalate privileges. Currently, no official patch is available, and proof-of-concept exploits have been released publicly, increasing the risk of attacks. Organizations using these routers should take immediate action to mitigate potential threats, as the vulnerability exposes devices to significant security risks. Affected routers include various models and firmware versions, with possible additional vulnerabilities in similar firmware builds. As a precaution, disabling remote web management, monitoring for unauthorized access, and preparing to update firmware when a patch is available are recommended.
Is there a hidden admin backdoor in Tenda routers allowing unauthorized remote access?
