CERT/CC Warns of Hidden Admin Backdoor in Tenda Router Firmware
CVE-2026-11405 affects five Tenda firmware builds and can bypass password checks through an undocumented admin login path in /bin/httpd.
More info