Tenda Ac9 vulnerabilities, page 2

94 vulnerabilities

Known vulnerabilities in Tenda Ac9, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.5HighCVE-2025-57638tenda · ac9_firmwaretenda ac9_firmwareBuffer overflow vulnerability in Tenda AC9 1.0 via the user supplied sys.vendor configuration value.EPSS0.40%6.5MediumCVE-2025-57639tenda · ac9_firmwaretenda ac9_firmwareOS Command injection vulnerability in Tenda AC9 1.0 was discovered to contain a command injection vulnerability via the usb.samba.guest.user parameter in the formSetSambaConf function of the httpd file.EPSS0.98%9CriticalCVE-2025-5839tenda · ac9_firmwareTenda AC9 POST Request AdvSetLanip fromadvsetlanip buffer overflowA vulnerability, which was classified as critical, has been found in Tenda AC9 15.03.02.13. Affected by this issue is the function fromadvsetlanip of the file /goform/AdvSetLanip of the component POST Request Handler. The manipulation of the argument lanMask leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.EPSS1.02%6.5MediumCVE-2025-5836tenda · ac9_firmwareTenda AC9 POST Request SetIPTVCfg formSetIptv command injectionA vulnerability was found in Tenda AC9 15.03.02.13. It has been rated as critical. This issue affects the function formSetIptv of the file /goform/SetIPTVCfg of the component POST Request Handler. The manipulation of the argument list leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.EPSS2.77%9CriticalCVE-2025-5847tenda · ac9_firmwareTenda AC9 HTTP POST Request SetRemoteWebCfg formSetSafeWanWebMan stack-based overflowA vulnerability has been found in Tenda AC9 15.03.02.13 and classified as critical. Affected by this vulnerability is the function formSetSafeWanWebMan of the file /goform/SetRemoteWebCfg of the component HTTP POST Request Handler. The manipulation of the argument remoteIp leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.EPSS0.98%7.1HighCVE-2025-5900tenda · ac9_firmwareTenda AC9 cross-site request forgeryA vulnerability, which was classified as problematic, was found in Tenda AC9 15.03.02.13. This affects an unknown part. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.EPSS0.30%9.8CriticalCVE-2025-22946tenda · ac9_firmwaretenda ac9_firmwareTenda ac9 v1.0 firmware v15.03.05.19 contains a stack overflow vulnerability in /goform/SetOnlineDevName, which may lead to remote arbitrary code execution.EPSS0.92%9.8CriticalCVE-2025-22949tenda · ac9_firmwaretenda ac9_firmwareTenda ac9 v1.0 firmware v15.03.05.19 is vulnerable to command injection in /goform/SetSambaCfg, which may lead to remote arbitrary code execution.EPSS1.98%9.8CriticalCVE-2025-44872tenda · ac9_firmwaretenda ac9_firmwareTenda AC9 V15.03.06.42_multi was found to contain a command injection vulnerability in the formsetUsbUnload function via the deviceName parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.EPSS1.91%9.8CriticalCVE-2025-44877tenda · ac9_firmwaretenda ac9_firmwareTenda AC9 V15.03.06.42_multi was found to contain a command injection vulnerability in the formSetSambaConf function via the usbname parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.EPSS1.91%8.8HighCVE-2025-10442tenda · ac15_firmware +1 moreTenda AC9/AC15 exeCommand formexeCommand os command injectionA vulnerability was determined in Tenda AC9 and AC15 15.03.05.14. This affects the function formexeCommand of the file /goform/exeCommand. This manipulation of the argument cmdinput causes os command injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized.EPSS8.72%9CriticalCVE-2025-10443tenda · ac15_firmware +1 moreTenda AC9/AC15 exeCommand formexeCommand buffer overflowA vulnerability was identified in Tenda AC9 and AC15 15.03.05.14/15.03.05.18. This vulnerability affects the function formexeCommand of the file /goform/exeCommand. Such manipulation of the argument cmdinput leads to buffer overflow. The attack can be executed remotely. The exploit is publicly available and might be used.EPSS4.20%9.8CriticalCVE-2025-45428tenda · ac9_firmwaretenda ac9_firmwareIn Tenda ac9 v1.0 with firmware V15.03.05.14_multi, the rebootTime parameter of /goform/SetSysAutoRebbotCfg has a stack overflow vulnerability, which can lead to remote arbitrary code execution.EPSS0.92%9.8CriticalCVE-2025-45042tenda · ac9_firmwaretenda ac9_firmwareTenda AC9 v15.03.05.14 was discovered to contain a command injection vulnerability via the Telnet function.EPSS1.65%9.8CriticalCVE-2025-45427tenda · ac9_firmwaretenda ac9_firmwareIn Tenda AC9 v1.0 with firmware V15.03.05.14_multi, the security parameter of /goform/WifiBasicSet has a stack overflow vulnerability, which can lead to remote arbitrary code execution.EPSS0.92%9.8CriticalCVE-2025-45429tenda · ac9_firmwaretenda ac9_firmwareIn the Tenda ac9 v1.0 router with firmware V15.03.05.14_multi, there is a stack overflow vulnerability in /goform/WifiWpsStart, which may lead to remote arbitrary code execution.EPSS1.07%9.8CriticalCVE-2020-26728tenda · ac9_firmwaretenda ac9_firmwareA vulnerability was discovered in Tenda AC9 v3.0 V15.03.06.42_multi and Tenda AC9 V1.0 V15.03.05.19(6318)_CN which allows for remote code execution via shell metacharacters in the guestuser field to the __fastcall function with a POST request.EPSS3.77%10CriticalCVE-2022-26278tenda · ac9_firmwaretenda ac9_firmwareTenda AC9 v15.03.2.21_cn was discovered to contain a stack overflow via the time parameter in the PowerSaveSet function.EPSS1.69%7.2HighCVE-2022-36571tenda · ac9_firmwaretenda ac9_firmwareTenda AC9 V15.03.05.19 was discovered to contain a stack overflow via the mask parameter at /goform/WanParameterSetting.EPSS1.09%8.8HighCVE-2022-36568tenda · ac9_firmwaretenda ac9_firmwareTenda AC9 V15.03.05.19 was discovered to contain a stack overflow via the list parameter at /goform/setPptpUserList.EPSS1.10%