M3 vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

M3

Product

M3

by Tenda · last CVE Apr 5, 2026

45

CVEs

0

On KEV

9.8

Max CVSS

0

New 30D

Vulnerabilities45 In the news0 Timeline

Severity mix

Critical 19High 26Medium 0Low 0

Severity

All severities45 Critical19 High26 Medium0 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add M3 to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2025-9299	9.8	5%	Aug 21	Tenda M3 getMasterPassengerAnalyseData formGetMasterPassengerAnalyseData stack-based overflow Affected: 1.0.0.12
CVE-2025-9298	9.8	1%	Aug 21	Tenda M3 QuickIndex formQuickIndex stack-based overflow Affected: 1.0.0.12
CVE-2023-51095	9.8	1%	Dec 26	Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function formDelWlRfPolicy Affected: 1.0.0.12(4856)
CVE-2023-51094	9.8	1%	Dec 26	Tenda M3 V1.0.0.12(4856) was discovered to contain a Command Execution vulnerability via the function TendaTelnet Affected: 1.0.0.12(4856)
CVE-2023-51093	9.8	1%	Dec 26	Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function fromSetLocalVlanInfo Affected: 1.0.0.12(4856)
CVE-2023-51092	9.8	13%	Dec 26	Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function upgrade Affected: 1.0.0.12(4856)
CVE-2023-51091	9.8	8%	Dec 26	Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function R7WebsSecurityHandler Affected: 1.0.0.12(4856)
CVE-2023-51090	9.8	1%	Dec 26	Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function formGetWeiXinConfig Affected: 1.0.0.12(4856)
CVE-2022-27083	9.8	3%	Mar 23	Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /cgi-bin/uploadAccessCodePic Affected: 1.0.0.12(4856)
CVE-2022-27081	9.8	3%	Mar 23	Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/SetLanInfo Affected: 1.0.0.12(4856)
CVE-2022-27082	9.8	3%	Mar 23	Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/SetInternetLanInfo Affected: 1.0.0.12(4856)
CVE-2022-27080	9.8	3%	Mar 23	Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/setWorkmode Affected: 1.0.0.12(4856)
CVE-2022-27079	9.8	3%	Mar 23	Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/setPicListItem Affected: 1.0.0.12(4856)
CVE-2022-27078	9.8	3%	Mar 23	Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/setAdInfoDetail Affected: 1.0.0.12(4856)
CVE-2022-27077	9.8	3%	Mar 23	Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /cgi-bin/uploadWeiXinPic Affected: 1.0.0.12(4856)
CVE-2022-27076	9.8	3%	Mar 23	Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/delAd Affected: 1.0.0.12(4856)
CVE-2022-26536	9.8	3%	Mar 23	Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/setFixTools Affected: 1.0.0.12(4856)
CVE-2022-26290	9.8	3%	Mar 23	Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/WriteFacMac Affected: 1.0.0.12(4856)
CVE-2022-26289	9.8	4%	Mar 23	Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/exeCommand Affected: 1.0.0.12(4856)