CVE-2026-11405

CVE

Threat entity extracted from intelligence sources

Frequency

7

occurrences

First Seen

July 6, 2026

Last Seen

July 9, 2026

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical Backdoor Vulnerability in Tenda Routers Exposes Admin Access69.9

A critical vulnerability, CVE-2026-11405, has been discovered in multiple Tenda router firmware versions, allowing unauthenticated attackers to gain full administrative control via a hidden backdoor. This flaw exists in the /bin/httpd binary, where the login() function bypasses standard authenticati...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (1)

Critical Backdoor Vulnerability in Tenda Routers Exposes Admin Access

Jul 7·10 sources

Related Articles (7)

CVE-2026-11405

nvd.nist.gov·Jul 9

Tenda Firmware Backdoor Lets Anyone Log In as Admin Regardless of Password

Techtimes·Jul 7

Hidden backdoor in Tenda router firmware grants admin access

Bleepingcomputer·Jul 7

Active Exploitation Alert: Hidden Admin Backdoor (CVE-2026-11405) in Tenda Router ...

Hidden Tenda Router Backdoor Grants Admin Access, No Patch Available

Securityaffairs.Co·Jul 7

1 / 2

Related Entities

APT41 Zero-day Exploit Malware Botnet Tenda China United States CWE-287 - Improper Authentication CWE-798 - Use of Hard-coded Credentials CWE-120 - Classic Buffer Overflow CWE-78 - OS Command Injection T1078 - Valid Accounts