SecurityThe Hacker Newsabout 4 hours ago
Tenda Router Firmware Has Hidden Admin Backdoor
1 min read
CERT/CC warns that multiple Tenda router firmware versions contain an undocumented backdoor in the login function of the /bin/httpd web server. The vulnerability, CVE-2026-11405, bypasses password verification by comparing a user-supplied password against a plaintext value from device configuration, granting full admin access without valid credentials.
Level
Hype check
Tap to vote and see what everyone thinks.
