Vulnerabilities

TI-2026-04861 CVE-2026-5550 · GHSA-4p8f-q5hf-m6pr

Tenda AC10 httpd fromSysToolChangePwd stack-based overflow

MEDIUM 40

A vulnerability was identified in Tenda AC10 16.03.10.10_multi_TDE01.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00525 Published 2026-04-05 No fix listed CWE-119

TI-2026-04860 CVE-2026-5549 · GHSA-7v8w-cr25-ggqq

Tenda AC10 RSA 2048-bit Private Key privkeySrv.pem hard-coded key

HIGH 70

A vulnerability was determined in Tenda AC10 16.03.10.10_multi_TDE01.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.0041 Published 2026-04-05 No fix listed CWE-320

TI-2026-04859 CVE-2026-5548 · GHSA-mf8f-5hfr-3cfm

Tenda AC10 httpd fromSysToolChangePwd stack-based overflow

MEDIUM 40

A vulnerability was found in Tenda AC10 16.03.10.10_multi_TDE01.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00581 Published 2026-04-05 No fix listed CWE-119

TI-2026-04858 CVE-2026-5547 · GHSA-5xr7-9jmx-g4x4

Tenda AC10 httpd formAddMacfilterRule os command injection

LOW 28

A vulnerability has been found in Tenda AC10 16.03.10.10_multi_TDE01.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.02135 Published 2026-04-05 No fix listed CWE-77

TI-2025-41118 CVE-2025-67074 · GHSA-qr3g-f776-5gg5

A Buffer overflow vulnerability in function fromAdvSetMacMtuWan of bin httpd in Tenda…

MEDIUM 62

A Buffer overflow vulnerability in function fromAdvSetMacMtuWan of bin httpd in Tenda AC10V4.0 V16.03.10.20 allows remote attackers to cause denial of service and possibly code execution by sending a post request with a…

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00379 Published 2025-12-17 No fix listed CWE-120

TI-2025-41117 CVE-2025-67073 · GHSA-mwc7-76g4-3ffm

A Buffer overflow vulnerability in function fromAdvSetMacMtuWan of bin httpd in Tenda…

HIGH 82

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00692 Published 2025-12-17 No fix listed CWE-120

TI-2025-11576 CVE-2025-12622 · GHSA-3w23-97r5-6593

Tenda AC10 SysRunCmd formSysRunCmd buffer overflow

MEDIUM 41

A vulnerability was determined in Tenda AC10 16.03.10.13.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00895 Published 2025-11-03 No fix listed CWE-119

TI-2025-35483 CVE-2025-57220 · GHSA-mmfc-q7vp-ffhr

An input validation flaw in the 'ate' service of Tenda AC10 v4.0 firmware…

MEDIUM 57

An input validation flaw in the 'ate' service of Tenda AC10 v4.0 firmware v16.03.10.09_multi_TDE01 to escalate privileges to root via a crafted UDP packet.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.008 Published 2025-08-28 No fix listed CWE-20

TI-2025-35482 CVE-2025-57219 · GHSA-h6gr-jj23-ghxv

Incorrect access control in the endpoint /goform/ate of Tenda AC10 v4.0 firmware…

LOW 26

Incorrect access control in the endpoint /goform/ate of Tenda AC10 v4.0 firmware v16.03.10.09_multi_TDE01 allows attackers to escalate privileges or access sensitive components via a crafted request.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00238 Published 2025-08-28 No fix listed CWE-284

TI-2025-35481 CVE-2025-57218 · GHSA-qww6-6c83-p8h2

Tenda AC10 v4.0 firmware v16.03.10.09_multi_TDE01 was discovered to contain a stack…

MEDIUM 57

Tenda AC10 v4.0 firmware v16.03.10.09_multi_TDE01 was discovered to contain a stack overflow via the security_5g parameter in the function sub_46284C.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00586 Published 2025-08-28 No fix listed CWE-121

TI-2025-35480 CVE-2025-57217 · GHSA-8jvm-993q-hxfr

Tenda AC10 v4.0 firmware v16.03.10.09_multi_TDE01 was discovered to contain a stack…

MEDIUM 57

Tenda AC10 v4.0 firmware v16.03.10.09_multi_TDE01 was discovered to contain a stack overflow via the Password parameter in the function R7WebsSecurityHandler.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00513 Published 2025-08-28 No fix listed CWE-121

TI-2025-35479 CVE-2025-57215 · GHSA-p4rj-qxwv-x2mh

Tenda AC10 v4.0 firmware v16.03.10.20 was discovered to contain a stack overflow via the…

HIGH 66

Tenda AC10 v4.0 firmware v16.03.10.20 was discovered to contain a stack overflow via the function get_parentControl_list_Info.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00392 Published 2025-08-28 No fix listed CWE-121

TI-2025-08533 CVE-2025-9309 · GHSA-wv5v-xwvm-fp5g

Tenda AC10 MD5 Hash shadow hard-coded credentials

MEDIUM 44

A vulnerability was found in Tenda AC10 16.03.10.13.

CVSS 4.0LOW 2.0 Local Low privileges No interaction EPSS 0.00223 Published 2025-08-21 No fix listed CWE-259

TI-2025-07483 CVE-2025-8178 · GHSA-cqgq-v935-xwv5

Tenda AC10 RequestsProcessLaid heap-based overflow

MEDIUM 41

A vulnerability classified as critical has been found in Tenda AC10 16.03.10.13.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00949 Published 2025-07-26 No fix listed CWE-119

TI-2025-05069 CVE-2025-5629 · GHSA-pxpm-gqm6-6pwh

Tenda AC10 HTTP SetPptpServerCfg formSetPPTPServer buffer overflow

MEDIUM 41

A vulnerability, which was classified as critical, was found in Tenda AC10 up to 15.03.06.47.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00902 Published 2025-06-05 No fix listed CWE-119

TI-2025-04388 CVE-2025-4896 · GHSA-h27g-3gmj-f4j6

Tenda AC10 UserCongratulationsExec buffer overflow

MEDIUM 41

A vulnerability was found in Tenda AC10 16.03.10.13 and classified as critical.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00891 Published 2025-05-18 No fix listed CWE-119

TI-2025-28844 CVE-2025-45779 · GHSA-27f3-wjfj-399m

Tenda AC10 V1.0re_V15.03.06.46 is vulnerable to Buffer Overflow in the…

HIGH 82

Tenda AC10 V1.0re_V15.03.06.46 is vulnerable to Buffer Overflow in the formSetPPTPUserList handler via the list POST parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.06832 Published 2025-05-12 No fix listed CWE-120

TI-2025-28601 CVE-2025-44175 · GHSA-ggw4-9fpp-hfv4

Tenda AC10 v4 V16.03.10.13 is vulnerable to Buffer Overflow in the GetParentControlInfo function.

MEDIUM 58

Tenda AC10 v4 V16.03.10.13 is vulnerable to Buffer Overflow in the GetParentControlInfo function.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00284 Published 2025-05-12 No fix listed CWE-120

TI-2025-19008 CVE-2025-25457 · GHSA-rg9h-f5v4-xwfp

Tenda AC10 V4.0si_V16.03.10.20 is vulnerable to Buffer Overflow in AdvSetMacMtuWan via cloneType2.

HIGH 72

Tenda AC10 V4.0si_V16.03.10.20 is vulnerable to Buffer Overflow in AdvSetMacMtuWan via cloneType2.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00685 Published 2025-04-17 No fix listed CWE-121

TI-2025-19006 CVE-2025-25455 · GHSA-qvww-5m45-9x54

Tenda AC10 V4.0si_V16.03.10.20 is vulnerable to Buffer Overflow in AdvSetMacMtuWan via wanMTU2.

HIGH 72

Tenda AC10 V4.0si_V16.03.10.20 is vulnerable to Buffer Overflow in AdvSetMacMtuWan via wanMTU2.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00578 Published 2025-04-17 No fix listed CWE-121

TI-2025-19005 CVE-2025-25454 · GHSA-5x7h-mx43-qfvx

Tenda AC10 V4.0si_V16.03.10.20 is vulnerable to Buffer Overflow in AdvSetMacMtuWan via wanSpeed2.

HIGH 72

Tenda AC10 V4.0si_V16.03.10.20 is vulnerable to Buffer Overflow in AdvSetMacMtuWan via wanSpeed2.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00578 Published 2025-04-17 No fix listed CWE-121

TI-2025-19009 CVE-2025-25458 · GHSA-258c-748x-qf4g

Tenda AC10 V4.0si_V16.03.10.20 is vulnerable to Buffer Overflow in AdvSetMacMtuWan via serverName2.

MEDIUM 54

Tenda AC10 V4.0si_V16.03.10.20 is vulnerable to Buffer Overflow in AdvSetMacMtuWan via serverName2.

CVSS 3.1MEDIUM 4.6 Network Low privileges User interaction EPSS 0.00266 Published 2025-04-15 No fix listed CWE-120

TI-2025-19007 CVE-2025-25456 · GHSA-f5cv-p69g-phc3

Tenda AC10 V4.0si_V16.03.10.20 is vulnerable to Buffer Overflow in AdvSetMacMtuWan via mac2.

HIGH 82

Tenda AC10 V4.0si_V16.03.10.20 is vulnerable to Buffer Overflow in AdvSetMacMtuWan via mac2.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00655 Published 2025-04-15 No fix listed CWE-120

TI-2025-19004 CVE-2025-25453 · GHSA-gv66-5jhq-833c

Tenda AC10 V4.0si_V16.03.10.20 is vulnerable to Buffer Overflow in AdvSetMacMtuWan via serviceName2.

MEDIUM 54

Tenda AC10 V4.0si_V16.03.10.20 is vulnerable to Buffer Overflow in AdvSetMacMtuWan via serviceName2.

CVSS 3.1MEDIUM 4.6 Network Low privileges User interaction EPSS 0.00266 Published 2025-04-15 No fix listed CWE-120

TI-2025-02761 CVE-2025-3161 · GHSA-xfpw-388w-fh3f

Tenda AC10 ShutdownSetAdd stack-based overflow

MEDIUM 41

A vulnerability was found in Tenda AC10 16.03.10.13 and classified as critical.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00935 Published 2025-04-03 No fix listed CWE-119

Vulnerabilities

Filters