Is the Tenda AC7 still getting security updates?

The Tenda AC7 stopped receiving security updates on 4 December 2025. New vulnerabilities will not be fixed.

The date after which a device gets no more security fixes is also called its end of life (EOL) or end of support.

No longer supported

Security updates ended on

4 December 2025to 3 March 2026
Device
Tenda AC7 (router)
Source
Tenda EOL Center - End of Life Products (End of service date column) (Worldwide)

What to do. Attackers are using known flaws in this model. Replace it. Until then, turn off remote administration and UPnP, and keep it off the Internet.

Vulnerabilities attackers are using

The U.S. cybersecurity agency (CISA) lists these vulnerabilities as actively exploited. Its description names the affected hardware versions when they are known.

  • CVE-2018-14558: Tenda AC7, AC9, and AC10 devices contain a command injection vulnerability due to the "formsetUsbUnload" function executes a dosystemCmd function with untrusted input. Successful exploitation allows an attacker to execute OS commands via a crafted goform/setUsbUnload request.

Support timeline

20242025202620272028V4.0All versionsToday
Security updates per hardware version, to scale. The bar ends on the manufacturer's date.

By hardware version

Dates differ between hardware versions and sometimes between markets. The version is on the label under the device.

Hardware versionStatusSecurity updates untilBasisSource
V4.0Unsupported4 December 2025Official end date published by the manufacturer.Worldwide
All versionsUnsupported3 March 2026Official end date published by the manufacturer.Worldwide

Questions

Is the Tenda AC7 still getting security updates?

The Tenda AC7 stopped receiving security updates on 4 December 2025. New vulnerabilities will not be fixed.

Is the Tenda AC7 affected by vulnerabilities attackers are using?

Yes. The CISA catalogue of exploited vulnerabilities lists CVE-2018-14558 for this model. Check the affected hardware versions and install the latest firmware, or replace the device if it is no longer supported.

What does end of life mean for the Tenda AC7?

After its end of life, the Tenda AC7 receives no more security fixes from Tenda. It keeps working, but any vulnerability found later stays open, which makes it an easy target once attackers know about it.

Where does this date come from?

From the manufacturer: Tenda EOL Center - End of Life Products (End of service date column). Each date is shown exactly as published.

  • 4G03ends 30 October 2027 Ending soon
  • 4G06cended 10 February 2026 Unsupported
  • 4G07ends 30 October 2027 Ending soon
  • 4G09ends 30 October 2027 Ending soon
  • 5G06-Outdoorended 18 May 2024 Unsupported
  • AC3ended 1 January 2026 Unsupported
  • AC8ended 30 June 2022 Unsupported
  • AC8-Cended 30 June 2022 Unsupported
  • AC10ended 1 January 2026 Unsupported
  • AC10Uended 30 June 2024 Unsupported
  • AC11ended 30 September 2023 Unsupported
  • AC23ended 1 August 2025 Unsupported

Every Tenda device   Routers from every brand