Ac5 Firmware (Tenda) - vulnerabilities (CVEs)

41 CVEs, 1 in the last 30 days, 6 known versions, newest CVE from 2026-10-06. Vendor: Tenda.

CVEs of Ac5 Firmware

CVE-2026-105778 - CVSS 9.9 (critical), 2026-10-06: A vulnerability has been found in Tenda AC5 02.03.01.111_multi. Affected by this issue is some unknown functionality of the file /goform/setWifi of the…
CVE-2026-4906 - CVSS 8.8 (high), 2026-03-27: A vulnerability was determined in Tenda AC5 15.03.06.47. The affected element is the function decodePwd of the file /goform/WizardHandle of the component POST…
CVE-2026-4905 - CVSS 8.8 (high), 2026-03-27: A vulnerability was found in Tenda AC5 15.03.06.47. Impacted is the function formWifiWpsOOB of the file /goform/WifiWpsOOB of the component POST Request…
CVE-2026-4904 - CVSS 8.8 (high), 2026-03-27: A vulnerability has been found in Tenda AC5 15.03.06.47. This issue affects the function formSetCfm of the file /goform/setcfm of the component POST Request…
CVE-2026-4903 - CVSS 8.8 (high), 2026-03-26: A flaw has been found in Tenda AC5 15.03.06.47. This vulnerability affects the function formQuickIndex of the file /goform/QuickIndex of the component POST…
CVE-2026-4902 - CVSS 8.8 (high), 2026-03-26: A vulnerability was detected in Tenda AC5 15.03.06.47. This affects the function fromAddressNat of the file /goform/addressNat of the component POST Request…
CVE-2025-6887 - CVSS 8.8 (high), 2025-06-30: A vulnerability was found in Tenda AC5 15.03.06.47 and classified as critical. Affected by this issue is some unknown functionality of the file…
CVE-2025-6886 - CVSS 8.8 (high), 2025-06-30: A vulnerability has been found in Tenda AC5 15.03.06.47 and classified as critical. Affected by this vulnerability is an unknown functionality of the file…
CVE-2025-5863 - CVSS 9.8 (critical), 2025-06-09: A vulnerability was found in Tenda AC5 15.03.06.47. It has been classified as critical. Affected is the function formSetRebootTimer of the file…
CVE-2025-5794 - CVSS 8.8 (high), 2025-06-06: A vulnerability, which was classified as critical, has been found in Tenda AC5 15.03.06.47. Affected by this issue is the function formSetPPTPUserList of the…
CVE-2025-5795 - CVSS 8.8 (high), 2025-06-06: A vulnerability, which was classified as critical, was found in Tenda AC5 1.0/15.03.06.47. This affects the function fromadvsetlanip of the file…
CVE-2023-41563 - CVSS 9.8 (critical), 2023-08-30: Tenda AC9 V3.0 V15.03.06.42_multi and Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 were discovered to contain a stack overflow via parameter mac at url…
CVE-2023-41559 - CVSS 9.8 (critical), 2023-08-30: Tenda AC7 V1.0 V15.03.06.44, Tenda AC9 V3.0 V15.03.06.42_multi, and Tenda AC5 V1.0RTL_V15.03.06.28 were discovered to contain a stack overflow via parameter…
CVE-2023-41557 - CVSS 9.8 (critical), 2023-08-30: Tenda AC7 V1.0 V15.03.06.44 and Tenda AC5 V1.0RTL_V15.03.06.28 were discovered to contain a stack overflow via parameter entrys and mitInterface at url…
CVE-2023-41562 - CVSS 9.8 (critical), 2023-08-30: Tenda AC7 V1.0 V15.03.06.44, Tenda AC9 V3.0 V15.03.06.42_multi, and Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 were discovered to contain a stack overflow via…
CVE-2023-41561 - CVSS 9.8 (critical), 2023-08-30: Tenda AC9 V3.0 V15.03.06.42_multi and Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 were discovered to contain a stack overflow via parameter startIp and endIp at url…
CVE-2023-41553 - CVSS 9.8 (critical), 2023-08-30: Tenda AC9 V3.0 V15.03.06.42_multi and Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 were discovered to contain a stack overflow via parameter list at url…
CVE-2023-41556 - CVSS 9.8 (critical), 2023-08-30: Tenda AC7 V1.0 V15.03.06.44, Tenda AC9 V3.0 V15.03.06.42_multi, and Tenda AC5 V1.0RTL_V15.03.06.28 were discovered to contain a stack overflow via parameter…
CVE-2023-38935 - CVSS 9.8 (critical), 2023-08-07: Tenda AC1206 V15.03.06.23, AC8 V4 V16.03.34.06, AC5 V1.0 V15.03.06.28, AC10 v4.0 V16.03.10.13 and AC9 V3.0 V15.03.06.42_multi were discovered to contain a…
CVE-2023-38933 - CVSS 9.8 (critical), 2023-08-07: Tenda AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0 V15.03.06.28, FH1203 V2.0.1.6 and AC9 V3.0 V15.03.06.42_multi, and FH1205…
CVE-2023-38937 - CVSS 9.8 (critical), 2023-08-07: Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC8 v4 V16.03.34.06, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, AC5 V1.0 V15.03.06.28, AC9 V3.0…
CVE-2023-38936 - CVSS 9.8 (critical), 2023-08-07: Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, AC5 V1.0 V15.03.06.28, FH1203 V2.0.1.6, AC9 V3.0…
CVE-2023-38930 - CVSS 9.8 (critical), 2023-08-07: Tenda AC7 V1.0,V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0,V15.03.06.28, AC9 V3.0,V15.03.06.42_multi and FH1205 V2.0.0.7(775) were discovered to contain a stack…
CVE-2023-38931 - CVSS 9.8 (critical), 2023-08-07: Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC8 v4 V16.03.34.06, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0 V15.03.06.28,…
CVE-2023-37717 - CVSS 9.8 (critical), 2023-07-14: Tenda F1202 V1.0BR_V1.2.0.20(408) and FH1202_V1.2.0.19_EN, AC10 V1.0, AC1206 V1.0, AC7 V1.0, AC5 V1.0, and AC9 V3.0 were discovered to contain a stack…
CVE-2023-37716 - CVSS 9.8 (critical), 2023-07-14: Tenda F1202 V1.0BR_V1.2.0.20(408) and FH1202_V1.2.0.19_EN, AC10 V1.0, AC1206 V1.0, AC7 V1.0, AC5 V1.0, and AC9 V3.0 were discovered to contain a stack…
CVE-2023-31587 - CVSS 9.8 (critical), 2023-05-16: Tenda AC5 router V15.03.06.28 was discovered to contain a remote code execution (RCE) vulnerability via the Mac parameter at ip/goform/WriteFacMac.
CVE-2023-30368 - CVSS 9.8 (critical), 2023-04-24: Tenda AC5 V15.03.06.28 is vulnerable to Buffer Overflow via the initWebs function.
CVE-2023-25218 - CVSS 9.8 (critical), 2023-04-07: Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the form_fast_setting_wifi_set function. This vulnerability allows…
CVE-2023-25217 - CVSS 9.8 (critical), 2023-04-07: Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the formWifiBasicSet function. This vulnerability allows attackers to…
CVE-2023-25220 - CVSS 9.8 (critical), 2023-04-07: Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the add_white_node function. This vulnerability allows attackers to cause…
CVE-2023-25216 - CVSS 9.8 (critical), 2023-04-07: Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the formSetFirewallCfg function. This vulnerability allows attackers to…
CVE-2023-25219 - CVSS 9.8 (critical), 2023-04-07: Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the fromDhcpListClient function. This vulnerability allows attackers to…
CVE-2023-25212 - CVSS 9.8 (critical), 2023-04-07: Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the fromSetWirelessRepeat function. This vulnerability allows attackers to…
CVE-2023-25215 - CVSS 9.8 (critical), 2023-04-07: Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the saveParentControlInfo function. This vulnerability allows attackers to…
CVE-2023-25211 - CVSS 9.8 (critical), 2023-04-07: Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the R7WebsSecurityHandler function. This vulnerability allows attackers to…
CVE-2023-25214 - CVSS 9.8 (critical), 2023-04-07: Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the setSchedWifi function. This vulnerability allows attackers to cause a…
CVE-2023-25210 - CVSS 9.8 (critical), 2023-04-07: Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the fromSetSysTime function. This vulnerability allows attackers to cause…
CVE-2023-25213 - CVSS 9.8 (critical), 2023-04-07: Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the check_param_changed function. This vulnerability allows attackers to…
CVE-2021-44971 - CVSS 9.8 (critical), 2022-01-28: Multiple Tenda devices are affected by authentication bypass, such as AC15V1.0 Firmware V15.03.05.20_multi?AC5V1.0 Firmware V15.03.06.48_multi and so on. an…
CVE-2021-3186 - CVSS 5.4 (medium), 2021-01-26: A Stored Cross-site scripting (XSS) vulnerability in /main.html Wifi Settings in Tenda AC5 AC1200 version V15.03.06.47_multi allows remote attackers to inject…