[CVE-2026-11405]

July 9, 2026

• Tenda firmware backdoor (CVE-2026-11405) grants unauthenticated attackers access to the router web management interface — and remains unpatched. SecurityWeek · Vulnerabilities & Exploits

in A 15-Year-Old Linux Kernel Bug Hands Root on Every Distro

July 8, 2026

• CERT/CC warns of an undocumented authentication backdoor (CVE-2026-11405) in multiple Tenda router firmware versions that grants admin access to the web management interface by bypassing password verification. BleepingComputer, The Hacker News · Vulnerabilities & Exploits

in Synacktiv Drops a Kerberos Reflection Bypass That Hands Attackers SYSTEM