Tenda a21 Firmware vulnerabilities

6 CVEs affecting Tenda a21 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-2886, published 2026-02-21.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-2871, published 2026-02-21. High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days. A weakness has been identified in Tenda A21 1.0.0.0. This affects the function fromSetIpMacBind of the file /goform/SetIpMacBind. This manipulation of the argument list causes stack-based buffer…
CVE-2026-2886, published 2026-02-21. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. A weakness has been identified in Tenda A21 1.0.0.0. This affects the function set_device_name of the file /goform/SetOnlineDevName. This manipulation of the argument devName causes stack-based…
CVE-2026-2874, published 2026-02-21. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. A flaw has been found in Tenda A21 1.0.0.0. Impacted is the function form_fast_setting_wifi_set of the file /goform/fast_setting_wifi_set. Executing a manipulation of the argument ssid can lead to…
CVE-2026-2873, published 2026-02-21. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability was detected in Tenda A21 1.0.0.0. This issue affects the function setSchedWifi of the file /goform/openSchedWifi. Performing a manipulation of the argument…
CVE-2026-2872, published 2026-02-21. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. A security vulnerability has been detected in Tenda A21 1.0.0.0. This vulnerability affects the function set_device_name of the file /goform/setBlackRule of the component MAC Filtering Configuration…
CVE-2026-2870, published 2026-02-21. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. A security flaw has been discovered in Tenda A21 1.0.0.0. Affected by this issue is the function set_qosMib_list of the file /goform/formSetQosBand. The manipulation of the argument list results in…