Vulnerabilities

TI-2026-23916 CVE-2026-31255 · GHSA-9h86-xppf-f3p9

A command injection vulnerability exists in Tenda AC18 V15.03.05.05_multi.

HIGH 75

A command injection vulnerability exists in Tenda AC18 V15.03.05.05_multi.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01121 Published 2026-04-27 No fix listed CWE-77

TI-2025-13676 CVE-2025-14993 · GHSA-29qw-ccch-hcg3

Tenda AC18 HTTP Request SetDlnaCfg sprintf stack-based overflow

HIGH 73

A vulnerability was detected in Tenda AC18 15.03.05.05.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.0074 Published 2025-12-21 No fix listed CWE-119

TI-2025-13675 CVE-2025-14992 · GHSA-f39m-23x8-34jr

Tenda AC18 HTTP Request GetParentControlInfo strcpy stack-based overflow

HIGH 73

A security vulnerability has been detected in Tenda AC18 15.03.05.05.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.0074 Published 2025-12-21 No fix listed CWE-119

TI-2025-39469 CVE-2025-63835 · GHSA-2mgg-5ppq-j685

A stack-based buffer overflow vulnerability was discovered in Tenda AC18…

HIGH 71

A stack-based buffer overflow vulnerability was discovered in Tenda AC18 v15.03.05.05_multi.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00693 Published 2025-11-10 No fix listed CWE-121

TI-2025-39468 CVE-2025-63834 · GHSA-3vc8-hhvv-jw47

A stored cross-site scripting (XSS) vulnerability was discovered in Tenda AC18…

MEDIUM 58

A stored cross-site scripting (XSS) vulnerability was discovered in Tenda AC18 v15.03.05.05_multi.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0024 Published 2025-11-10 No fix listed CWE-79

TI-2025-10376 CVE-2025-11328 · GHSA-594q-8639-48w6

Tenda AC18 SetDDNSCfg stack-based overflow

HIGH 73

A vulnerability was detected in Tenda AC18 15.03.05.19(6318).

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01097 Published 2025-10-06 No fix listed CWE-119

TI-2025-10375 CVE-2025-11327 · GHSA-77m5-87j2-9j7q

Tenda AC18 SetUpnpCfg stack-based overflow

HIGH 73

A security vulnerability has been detected in Tenda AC18 15.03.05.19(6318).

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01273 Published 2025-10-06 No fix listed CWE-119

TI-2025-10374 CVE-2025-11326 · GHSA-crhw-rxfp-56gj

Tenda AC18 WifiMacFilterSet stack-based overflow

HIGH 73

A weakness has been identified in Tenda AC18 15.03.05.19(6318).

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01273 Published 2025-10-06 No fix listed CWE-119

TI-2025-10373 CVE-2025-11325 · GHSA-5g8h-54w4-pmjh

Tenda AC18 fast_setting_pppoe_set stack-based overflow

HIGH 73

A security flaw has been discovered in Tenda AC18 15.03.05.19(6318).

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00817 Published 2025-10-06 No fix listed CWE-119

TI-2025-10372 CVE-2025-11324 · GHSA-gv3w-h3x7-gxc4

Tenda AC18 setNotUpgrade stack-based overflow

HIGH 73

A vulnerability was identified in Tenda AC18 15.03.05.19(6318).

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00846 Published 2025-10-06 No fix listed CWE-119

TI-2025-37747 CVE-2025-60663 · GHSA-cm45-36h6-6p23

Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the wanMTU…

HIGH 66

Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the wanMTU parameter in the fromAdvSetMacMtuWan function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00397 Published 2025-10-02 No fix listed CWE-121

TI-2025-37746 CVE-2025-60662 · GHSA-4rcc-4cf7-q84c

Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the wanSpeed…

HIGH 66

Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the wanSpeed parameter in the fromAdvSetMacMtuWan function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00491 Published 2025-10-02 No fix listed CWE-121

TI-2025-37745 CVE-2025-60661 · GHSA-q9m3-q5h2-q5vf

Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the cloneType…

MEDIUM 57

Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the cloneType parameter in the fromAdvSetMacMtuWan function.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00422 Published 2025-10-02 No fix listed CWE-121

TI-2025-37744 CVE-2025-60660 · GHSA-hg7c-2v92-6975

Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the mac parameter…

HIGH 66

Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the mac parameter in the fromAdvSetMacMtuWan function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00491 Published 2025-10-02 No fix listed CWE-121

TI-2025-10191 CVE-2025-11123 · GHSA-rp44-fr37-g447

Tenda AC18 saveAutoQos stack-based overflow

MEDIUM 47

A flaw has been found in Tenda AC18 15.03.05.19.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.0085 Published 2025-09-28 No fix listed CWE-119

TI-2025-10190 CVE-2025-11122 · GHSA-g6g7-3q23-f7qx

Tenda AC18 WizardHandle stack-based overflow

MEDIUM 47

A vulnerability was detected in Tenda AC18 15.03.05.19.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.0085 Published 2025-09-28 No fix listed CWE-119

TI-2025-10189 CVE-2025-11121 · GHSA-m2xx-gf2q-4rwx

Tenda AC18 AdvSetLanip command injection

MEDIUM 57

A security vulnerability has been detected in Tenda AC18 15.03.05.19.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.03524 Published 2025-09-28 No fix listed CWE-74

TI-2025-10188 CVE-2025-11120 · GHSA-62cc-6mpf-6rxc

Tenda AC8 SetServerConfig formSetServerConfig buffer overflow

HIGH 73

A weakness has been identified in Tenda AC8 16.03.34.06.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.04049 Published 2025-09-28 No fix listed CWE-119

TI-2025-08269 CVE-2025-9023 · GHSA-xffp-g8q4-6v4h

Tenda AC7/AC18 SetLEDCfg formSetSchedLed buffer overflow

HIGH 73

A vulnerability has been found in Tenda AC7 and AC18 15.03.05.19/15.03.06.44.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00942 Published 2025-08-15 No fix listed CWE-119

TI-2025-07487 CVE-2025-8182 · GHSA-q8w8-6rfh-2mq4

Tenda AC18 Samba smb.conf weak password

LOW 29

A vulnerability has been found in Tenda AC18 15.03.05.19 and classified as problematic.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00521 Published 2025-07-26 No fix listed CWE-521

TI-2025-05049 CVE-2025-5609 · GHSA-pfgm-6vwx-85w9

Tenda AC18 AdvSetLanip fromadvsetlanip buffer overflow

HIGH 71

A vulnerability classified as critical was found in Tenda AC18 15.03.05.05.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01057 Published 2025-06-04 No fix listed CWE-119

TI-2025-05048 CVE-2025-5608 · GHSA-43mc-8f4r-rrm4

Tenda AC18 SetSysAutoRebbotCfg formsetreboottimer buffer overflow

HIGH 71

A vulnerability classified as critical has been found in Tenda AC18 15.03.05.05.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01057 Published 2025-06-04 No fix listed CWE-119

TI-2025-05047 CVE-2025-5607 · GHSA-rwg8-8j6r-ggfw

Tenda AC18 setPptpUserList formSetPPTPUserList buffer overflow

HIGH 71

A vulnerability was found in Tenda AC18 15.03.05.05.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01057 Published 2025-06-04 No fix listed CWE-119

TI-2025-05046 CVE-2025-5606 · GHSA-mfw6-88f6-x9r5

Tenda AC18 SetIPTVCfg formSetIptv command injection

MEDIUM 57

A vulnerability was found in Tenda AC18 15.03.05.05.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.03773 Published 2025-06-04 No fix listed CWE-74

TI-2025-00438 CVE-2025-0528 · GHSA-jj49-w25f-3wxj

Tenda AC8/AC10/AC18 HTTP Request telnet command injection

HIGH 72

A vulnerability, which was classified as critical, has been found in Tenda AC8, AC10 and AC18 16.03.10.20.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.06234 Published 2025-01-17 No fix listed CWE-74

Vulnerabilities

Filters