Post
Gene Conroy-Jones
foursignalsdev.bsky.social
did:plc:446o4dvplp6vhhjayeapiuxt
Tenda routers ship with a fallback password backdoor (CVE-2026-11405). No patch for FH1201, W15E, AC10, AC5, AC6. The bypass uses a runtime config key, evading static analysis.
https://www.foursignals.dev/wire/2026-07-20/the-fallback-password-dissecting-the-tenda-router-backdoor-c093df
2026-07-21T04:02:00.164Z