--- title: Hidden backdoor in Tenda router firmware grants admin access description: A hidden authentication backdoor (CVE-2026-11405) has been discovered in multiple Tenda router firmware versions. The flaw exists in the 'login()' function of... canonical: https://daily.dev/posts/hidden-backdoor-in-tenda-router-firmware-grants-admin-access-p9eiszq9c twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Hidden backdoor in Tenda router firmware grants admin access | daily.dev og:description: A hidden authentication backdoor (CVE-2026-11405) has been discovered in multiple Tenda router firmware versions. The flaw exists in the 'login()' function of... og:url: https://daily.dev/posts/hidden-backdoor-in-tenda-router-firmware-grants-admin-access-p9eiszq9c og:image: https://api.daily.dev/og/posts/p9EISZQ9C.png og:image:alt: Hidden backdoor in Tenda router firmware grants admin access og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Hidden backdoor in Tenda router firmware grants admin access **[BleepingComputer](https://daily.dev/sources/bleepingcomputer)** · 3 min read · 0 upvotes · 0 comments ## Summary A hidden authentication backdoor (CVE-2026-11405) has been discovered in multiple Tenda router firmware versions. The flaw exists in the 'login()' function of the web server binary, which falls back to an undocumented alternate password stored in 'sys.rzadmin.password' if standard MD5 authentication fails. Any username is accepted as long as the backdoor password matches, granting full admin access. Five Tenda router models are affected (FH1201, W15E, AC10, AC5, AC6 V2). No patch is available as Tenda has not responded to CERT/CC. Users are advised to disable remote web management and change the default LAN IP to reduce exposure. The vulnerability is likely to be targeted by botnets. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [Hacking A Tenda AC1200 Wi-Fi Router With A CVE Combo](https://daily.dev/posts/hacking-a-tenda-ac1200-wi-fi-router-with-a-cve-combo-psnxwd458) · Hackaday · 2 upvotes · 0 comments - [A Deep Dive Into Attempted Exploitation of CVE-2023-33538](https://daily.dev/posts/a-deep-dive-into-attempted-exploitation-of-cve-2023-33538-prhsvxjqs) · Unit 42 · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#firmware](https://daily.dev/tags/firmware) [View this post on daily.dev](https://daily.dev/posts/hidden-backdoor-in-tenda-router-firmware-grants-admin-access-p9eiszq9c) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Hidden backdoor in Tenda router firmware grants admin access","url":"https://daily.dev/posts/hidden-backdoor-in-tenda-router-firmware-grants-admin-access-p9eiszq9c","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/hidden-backdoor-in-tenda-router-firmware-grants-admin-access-p9eiszq9c"},"datePublished":"2026-07-07T17:28:01.946Z","dateModified":"2026-07-07T17:28:21.570Z","description":"A hidden authentication backdoor (CVE-2026-11405) has been discovered in multiple Tenda router firmware versions. The flaw exists in the 'login()' function of...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/8c606693bebc34071ae3efcc7357018f?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/8c606693bebc34071ae3efcc7357018f?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"BleepingComputer","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"BleepingComputer","logo":"https://media.daily.dev/image/upload/s--as8nJ3qy--/f_auto,q_auto/v1774959951/logos/bleepingcomputer?_a=BAMAMiWQ0","url":"https://daily.dev/sources/bleepingcomputer"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/hidden-backdoor-in-tenda-router-firmware-grants-admin-access-p9eiszq9c","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,firmware","timeRequired":"PT3M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"BleepingComputer","item":"https://daily.dev/sources/bleepingcomputer"},{"@type":"ListItem","position":3,"name":"Hidden backdoor in Tenda router firmware grants admin access"}]} ```