Vulnerabilities

TI-2026-07283 CVE-2026-8263 · GHSA-49r7-qrrc-gw83

Tenda AC6 httpd WifiExtraSet fromSetWirelessRepeat os command injection

MEDIUM 56

A security flaw has been discovered in Tenda AC6 15.03.06.49_multi_TDE01.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.05003 Published 2026-05-11 No fix listed CWE-77

TI-2025-13895 CVE-2025-15218 · GHSA-6mxp-7c6p-vwm2

Tenda AC10U POST Request Parameter AdvSetLanip fromadvsetlanip buffer overflow

HIGH 73

A weakness has been identified in Tenda AC10U 15.03.06.48/15.03.06.49.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.03327 Published 2025-12-30 No fix listed CWE-119

TI-2025-13892 CVE-2025-15215 · GHSA-p9pg-8prj-h5rw

Tenda AC10U HTTP POST Request setPptpUserList formSetPPTPUserList buffer overflow

HIGH 73

A vulnerability was determined in Tenda AC10U 15.03.06.48/15.03.06.49.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00702 Published 2025-12-30 No fix listed CWE-119

TI-2024-09525 CVE-2024-10280 · GHSA-xvqq-m3qc-q58j

Tenda AC6/AC7/AC8/AC9/AC10/AC10U/AC15/AC18/AC500/AC1206 GetIPTV websReadEvent null pointer dereference

MEDIUM 64

A vulnerability was found in Tenda AC6, AC7, AC8, AC9, AC10, AC10U, AC15, AC18, AC500 and AC1206 up to 20241022.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00805 Published 2024-10-23 No fix listed CWE-476

TI-2024-21264 CVE-2024-32306 · GHSA-gcgc-cr4r-c8xx

Tenda AC10U v1.0 Firmware v15.03.06.49 has a stack overflow vulnerability located via the…

MEDIUM 59

Tenda AC10U v1.0 Firmware v15.03.06.49 has a stack overflow vulnerability located via the PPW parameter in the fromWizardHandle function.

CVSS 3.1MEDIUM 5.7 Adjacent network No auth User interaction EPSS 0.00457 Published 2024-04-17 No fix listed CWE-121

TI-2024-20318 CVE-2024-30612 · GHSA-7rfv-m2fm-w83c

Tenda AC10U v15.03.06.48 has a stack overflow vulnerability in the deviceId, limitSpeed…

HIGH 68

Tenda AC10U v15.03.06.48 has a stack overflow vulnerability in the deviceId, limitSpeed, limitSpeedUp parameter from formSetClientState function.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00667 Published 2024-03-28 No fix listed CWE-121

TI-2024-02663 CVE-2024-2853 · GHSA-47ww-f64v-7564

Tenda AC10U setsambacfg formSetSambaConf os command injection

HIGH 75

A vulnerability was found in Tenda AC10U 15.03.06.48/15.03.06.49.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04009 Published 2024-03-24 No fix listed CWE-78

TI-2024-02575 CVE-2024-2764 · GHSA-9ph4-wxwh-x4xm

Tenda AC10U SetPptpServerCfg formSetPPTPServer stack-based overflow

HIGH 71

A vulnerability, which was classified as critical, was found in Tenda AC10U 15.03.06.48.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0148 Published 2024-03-21 No fix listed CWE-121

TI-2024-02574 CVE-2024-2763 · GHSA-c7cm-2h42-m8x5

Tenda AC10U setcfm formSetCfm stack-based overflow

MEDIUM 41

A vulnerability, which was classified as critical, has been found in Tenda AC10U 15.03.06.48.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01544 Published 2024-03-21 No fix listed CWE-121

TI-2024-02524 CVE-2024-2711 · GHSA-h9rc-rj87-48r4

Tenda AC10U addWifiMacFilter stack-based overflow

HIGH 71

A vulnerability was found in Tenda AC10U 15.03.06.48.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01494 Published 2024-03-20 No fix listed CWE-121

TI-2024-02523 CVE-2024-2710 · GHSA-jx32-f9jj-34p6

Tenda AC10U openSchedWifi setSchedWifi stack-based overflow

HIGH 73

A vulnerability was found in Tenda AC10U 15.03.06.49.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01482 Published 2024-03-20 No fix listed CWE-121

TI-2024-02522 CVE-2024-2709 · GHSA-rx3g-7rv4-58vw

Tenda AC10U SetStaticRouteCfg fromSetRouteStatic stack-based overflow

HIGH 73

A vulnerability was found in Tenda AC10U 15.03.06.49.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01482 Published 2024-03-20 No fix listed CWE-121

TI-2024-02521 CVE-2024-2708 · GHSA-x5f4-w9r3-6rpq

Tenda AC10U execCommand formexeCommand stack-based overflow

MEDIUM 43

A vulnerability was found in Tenda AC10U 15.03.06.49 and classified as critical.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0148 Published 2024-03-20 No fix listed CWE-121

TI-2024-02520 CVE-2024-2707 · GHSA-8m4c-mqff-jhwh

Tenda AC10U WriteFacMac formWriteFacMac os command injection

HIGH 73

A vulnerability has been found in Tenda AC10U 15.03.06.49 and classified as critical.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.046 Published 2024-03-20 No fix listed CWE-78

TI-2024-02519 CVE-2024-2706 · GHSA-gwhc-573h-jxwh

Tenda AC10U WifiWpsStart formWifiWpsStart stack-based overflow

HIGH 73

A vulnerability, which was classified as critical, was found in Tenda AC10U 15.03.06.49.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01734 Published 2024-03-20 No fix listed CWE-121

TI-2024-02518 CVE-2024-2705 · GHSA-r42v-8ppg-qjqx

Tenda AC10U SetNetControlList formSetQosBand stack-based overflow

HIGH 73

A vulnerability, which was classified as critical, has been found in Tenda AC10U 1.0/15.03.06.49.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0148 Published 2024-03-20 No fix listed CWE-121

TI-2024-02517 CVE-2024-2704 · GHSA-jh2w-vmjx-m29q

Tenda AC10U SetFirewallCfg formSetFirewallCfg stack-based overflow

HIGH 73

A vulnerability classified as critical was found in Tenda AC10U 15.03.06.49.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01546 Published 2024-03-20 No fix listed CWE-121

TI-2024-02516 CVE-2024-2703 · GHSA-5gh8-jmm4-99ww

Tenda AC10U SetOnlineDevName formSetDeviceName stack-based overflow

HIGH 73

A vulnerability classified as critical has been found in Tenda AC10U 15.03.06.49.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01546 Published 2024-03-20 No fix listed CWE-121

TI-2024-00852 CVE-2024-0924 · GHSA-2532-vm9m-g275

Tenda AC10U formSetPPTPServer stack-based overflow

HIGH 81

A vulnerability, which was classified as critical, was found in Tenda AC10U 15.03.06.49_multi_TDE01.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00905 Published 2024-01-26 No fix listed CWE-121

Vulnerabilities

Filters