CERT/CC Warns of Hidden Admin Backdoor in Tenda Router Firmware

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-07-07 06:40 UTC
  • Importiert: 2026-07-13 11:58 UTC
  • CVSS: 9.8
  • Quelle-ID: thn_global
  • uid_hash: 2354b3636922f34f3055ae0d1e37d5e646966b534be161eda3b5c89b47f80616
The Hacker News

Inhalt

Several versions of firmware released by Chinese network device manufacturer Tenda have been found to embed an undocumented authentication backdoor that enables administrative access to the devices' web management interfaces, the CERT Coordination Center (CERT/CC) warned Monday.

"An attacker can exploit this vulnerability, tracked as CVE-2026-11405, to bypass the password verification process

Verknuepfte CVEs

CVE-ID Severity (Quelle) CVSS (Quelle) Severity (CVE.org) CVSS (CVE.org) EPSS EPSS-Pctl Veroeffentlicht (CVE.org)

CVE-2026-11405

CRITICAL

9.8

CRITICAL

9.8

2026-07-06

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
The Hacker News

thn_global

 security_news - de https://feeds.feedburner.com/TheHackersNews
Zurueck zur Eintrags-Liste