Vulnerabilities

TI-2026-05279 CVE-2026-6016 · GHSA-wqhq-hx3v-9xwh

Tenda AC9 POST Request WizardHandle decodePwd stack-based overflow

HIGH 73

A vulnerability was found in Tenda AC9 15.03.02.13.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00854 Published 2026-04-10 No fix listed CWE-119

TI-2026-05278 CVE-2026-6015 · GHSA-9jxj-33wq-5v9p

Tenda AC9 POST Request QuickIndex formQuickIndex stack-based overflow

HIGH 73

A vulnerability has been found in Tenda AC9 15.03.02.13.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00825 Published 2026-04-10 No fix listed CWE-119

TI-2026-01841 CVE-2026-2192 · GHSA-838g-pm36-9pfv

Tenda AC9 formGetRebootTimer stack-based overflow

HIGH 72

A security vulnerability has been detected in Tenda AC9 15.03.06.42_multi.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.00786 Published 2026-02-08 No fix listed CWE-119

TI-2026-01840 CVE-2026-2191 · GHSA-j5pp-jx5r-4q45

Tenda AC9 formGetDdosDefenceList stack-based overflow

HIGH 72

A weakness has been identified in Tenda AC9 15.03.06.42_multi.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.00786 Published 2026-02-08 No fix listed CWE-119

TI-2025-13053 CVE-2025-14286 · GHSA-mm27-h58x-qxc3

Tenda AC9 Configuration File DownloadCfg.jpg information disclosure

HIGH 70

A vulnerability was determined in Tenda AC9 15.03.05.14_multi.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00675 Published 2025-12-09 No fix listed CWE-200

TI-2025-35596 CVE-2025-57639 · GHSA-9745-w7f4-f37c

OS Command injection vulnerability in Tenda AC9 1.0 was discovered to contain a command…

HIGH 70

OS Command injection vulnerability in Tenda AC9 1.0 was discovered to contain a command injection vulnerability via the usb.samba.guest.user parameter in the formSetSambaConf function of the httpd file.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00982 Published 2025-09-23 No fix listed CWE-78

TI-2025-35595 CVE-2025-57638 · GHSA-pjcj-p3c8-pcwx

Buffer overflow vulnerability in Tenda AC9 1.0 via the user supplied sys.vendor configuration value.

HIGH 66

Buffer overflow vulnerability in Tenda AC9 1.0 via the user supplied sys.vendor configuration value.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00397 Published 2025-09-23 No fix listed CWE-122

TI-2025-09576 CVE-2025-10443 · GHSA-x3v3-ggmx-75pp

Tenda AC9/AC15 exeCommand formexeCommand buffer overflow

HIGH 73

A vulnerability was identified in Tenda AC9 and AC15 15.03.05.14/15.03.05.18.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.04569 Published 2025-09-15 No fix listed CWE-119

TI-2025-09575 CVE-2025-10442 · GHSA-9m2g-6p8r-vr3w

Tenda AC9/AC15 exeCommand formexeCommand os command injection

MEDIUM 57

A vulnerability was determined in Tenda AC9 and AC15 15.03.05.14.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.09159 Published 2025-09-15 No fix listed CWE-77

TI-2025-08921 CVE-2025-9731 · GHSA-mjfw-v74j-p2xx

Tenda AC9 Administrative shadow hard-coded credentials

MEDIUM 44

A vulnerability was determined in Tenda AC9 15.03.05.19.

CVSS 4.0LOW 2.0 Local Low privileges No interaction EPSS 0.00151 Published 2025-08-31 No fix listed CWE-259

TI-2025-05326 CVE-2025-5900 · GHSA-8cxq-rp45-79vm

Tenda AC9 cross-site request forgery

MEDIUM 63

A vulnerability, which was classified as problematic, was found in Tenda AC9 15.03.02.13.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00331 Published 2025-06-09 No fix listed CWE-352

TI-2025-05275 CVE-2025-5847 · GHSA-gx3m-44w2-wmgh

Tenda AC9 HTTP POST Request SetRemoteWebCfg formSetSafeWanWebMan stack-based overflow

HIGH 73

A vulnerability has been found in Tenda AC9 15.03.02.13 and classified as critical.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01057 Published 2025-06-08 No fix listed CWE-119

TI-2025-05267 CVE-2025-5839 · GHSA-xpmp-hffj-q43q

Tenda AC9 POST Request AdvSetLanip fromadvsetlanip buffer overflow

HIGH 73

A vulnerability, which was classified as critical, has been found in Tenda AC9 15.03.02.13.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01095 Published 2025-06-07 No fix listed CWE-119

TI-2025-05264 CVE-2025-5836 · GHSA-4jg7-q447-f8gx

Tenda AC9 POST Request SetIPTVCfg formSetIptv command injection

MEDIUM 57

A vulnerability was found in Tenda AC9 15.03.02.13.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.02922 Published 2025-06-07 No fix listed CWE-74

TI-2025-28726 CVE-2025-45042 · GHSA-m46c-2xgf-gfrv

Tenda AC9 v15.03.05.14 was discovered to contain a command injection vulnerability via the Telnet function.

HIGH 82

Tenda AC9 v15.03.05.14 was discovered to contain a command injection vulnerability via the Telnet function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01651 Published 2025-05-05 No fix listed CWE-78

TI-2025-28675 CVE-2025-44877 · GHSA-p3h7-jggj-frv4

Tenda AC9 V15.03.06.42_multi was found to contain a command injection vulnerability in…

HIGH 82

Tenda AC9 V15.03.06.42_multi was found to contain a command injection vulnerability in the formSetSambaConf function via the usbname parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01905 Published 2025-05-02 No fix listed CWE-77

TI-2025-28674 CVE-2025-44872 · GHSA-6jw2-2v2j-w474

Tenda AC9 V15.03.06.42_multi was found to contain a command injection vulnerability in…

HIGH 82

Tenda AC9 V15.03.06.42_multi was found to contain a command injection vulnerability in the formsetUsbUnload function via the deviceName parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01905 Published 2025-05-02 No fix listed CWE-77

TI-2025-28777 CVE-2025-45429 · GHSA-vf42-fm5m-wqq9

In the Tenda ac9 v1.0 router with firmware V15.03.05.14_multi, there is a stack overflow…

HIGH 82

In the Tenda ac9 v1.0 router with firmware V15.03.05.14_multi, there is a stack overflow vulnerability in /goform/WifiWpsStart, which may lead to remote arbitrary code execution.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0109 Published 2025-04-23 No fix listed CWE-121

TI-2025-28776 CVE-2025-45428 · GHSA-jqqv-g9pc-97qc

In Tenda ac9 v1.0 with firmware V15.03.05.14_multi, the rebootTime parameter of…

HIGH 82

In Tenda ac9 v1.0 with firmware V15.03.05.14_multi, the rebootTime parameter of /goform/SetSysAutoRebbotCfg has a stack overflow vulnerability, which can lead to remote arbitrary code execution.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00934 Published 2025-04-23 No fix listed CWE-121

TI-2025-28775 CVE-2025-45427 · GHSA-fc67-q532-m8q4

In Tenda AC9 v1.0 with firmware V15.03.05.14_multi, the security parameter of…

HIGH 82

In Tenda AC9 v1.0 with firmware V15.03.05.14_multi, the security parameter of /goform/WifiBasicSet has a stack overflow vulnerability, which can lead to remote arbitrary code execution.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00934 Published 2025-04-23 No fix listed CWE-121

TI-2025-21061 CVE-2025-29387 · GHSA-54v8-qjwx-hj66

In Tenda AC9 v1.0 V15.03.05.14_multi, the wanSpeed parameter of /goform/AdvSetMacMtuWan…

HIGH 72

In Tenda AC9 v1.0 V15.03.05.14_multi, the wanSpeed parameter of /goform/AdvSetMacMtuWan has a stack overflow vulnerability, which can lead to remote arbitrary code execution.

CVSS 3.1HIGH 7.1 Network Low privileges User interaction EPSS 0.00559 Published 2025-03-14 No fix listed CWE-121

TI-2025-21060 CVE-2025-29386 · GHSA-2j7h-v8wc-gmgr

In Tenda AC9 v1.0 V15.03.05.14_multi, the mac parameter of /goform/AdvSetMacMtuWan has a…

HIGH 82

In Tenda AC9 v1.0 V15.03.05.14_multi, the mac parameter of /goform/AdvSetMacMtuWan has a stack overflow vulnerability, which can lead to remote arbitrary code execution.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00897 Published 2025-03-14 No fix listed CWE-787

TI-2025-21059 CVE-2025-29385 · GHSA-jcrc-wc7g-62pw

In Tenda AC9 v1.0 V15.03.05.14_multi, the cloneType parameter of /goform/AdvSetMacMtuWan…

HIGH 82

In Tenda AC9 v1.0 V15.03.05.14_multi, the cloneType parameter of /goform/AdvSetMacMtuWan has a stack overflow vulnerability, which can lead to remote arbitrary code execution.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00897 Published 2025-03-14 No fix listed CWE-787

TI-2025-21058 CVE-2025-29384 · GHSA-c3m4-xrx9-mwc5

In Tenda AC9 v1.0 V15.03.05.14_multi, the wanMTU parameter of /goform/AdvSetMacMtuWan has…

HIGH 82

In Tenda AC9 v1.0 V15.03.05.14_multi, the wanMTU parameter of /goform/AdvSetMacMtuWan has a stack overflow vulnerability, which can lead to remote arbitrary code execution.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0194 Published 2025-03-14 No fix listed CWE-787

TI-2025-16795 CVE-2025-22949 · GHSA-hw79-cp29-3x6c

Tenda ac9 v1.0 firmware v15.03.05.19 is vulnerable to command injection in…

MEDIUM 53

Tenda ac9 v1.0 firmware v15.03.05.19 is vulnerable to command injection in /goform/SetSambaCfg, which may lead to remote arbitrary code execution.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01985 Published 2025-01-10 No fix listed CWE-77

Vulnerabilities

Filters