CERT/CC flags hidden admin backdoor in Tenda router firmware (CVE-2026-11405)

Intelligence Summary

CERT Coordination Center (CERT/CC) says certain Tenda router firmware versions contain an undocumented authentication backdoor. The backdoor can be abused to bypass password verification and gain administrative access to the web management interface. The issue is tracked as CVE-2026-11405. Successful exploitation could allow attackers to change router settings, monitor traffic, or pivot deeper into local networks. Owners of affected Tenda devices should check for available firmware updates and restrict access to management interfaces until patched.

Recommended Action

Check whether your Tenda deployment is affected by CVE-2026-11405 and apply the vendor fix. Until then, watch authentication and outbound traffic logs for the indicators described in the source. This signal rests on a single report, so corroborate it before acting on anything irreversible.

Topics