Ac6 Firmware (Tenda) - vulnerabilities (CVEs)

109 CVEs, 0 in the last 30 days, 19 known versions, newest CVE from 2026-05-11. Vendor: Tenda.

CVEs of Ac6 Firmware

• CVE-2026-8265 - CVSS 7.2 (high), 2026-05-11: A security vulnerability has been detected in Tenda AC6 15.03.06.23. Affected by this issue is the function get_log_file of the file /goform/getLogFile of the…
• CVE-2026-8264 - CVSS 8.8 (high), 2026-05-11: A weakness has been identified in Tenda AC6 15.03.06.23. Affected by this vulnerability is the function formWifiApScan of the file /goform/WifiApScan of the…
• CVE-2026-8263 - CVSS 9.8 (critical), 2026-05-11: A security flaw has been discovered in Tenda AC6 15.03.06.49_multi_TDE01. Affected is the function fromSetWirelessRepeat of the file /goform/WifiExtraSet of…
• CVE-2026-8259 - CVSS 7.2 (high), 2026-05-11: A vulnerability has been found in Tenda AC6 2.0/15.03.06.23. The affected element is an unknown function of the file /goform/telnet of the component httpd.…
• CVE-2025-52221 - CVSS 9.8 (critical), 2026-04-08: Tenda AC6 15.03.05.16_multi is vulnerable to Buffer Overflow in the formSetCfm function via the funcname, funcpara1, and funcpara2 parameters.
• CVE-2026-4961 - CVSS 8.8 (high), 2026-03-27: A vulnerability was identified in Tenda AC6 15.03.05.16. Affected by this vulnerability is the function formQuickIndex of the file /goform/QuickIndex of the…
• CVE-2026-4960 - CVSS 8.8 (high), 2026-03-27: A vulnerability was determined in Tenda AC6 15.03.05.16. Affected is the function fromWizardHandle of the file /goform/WizardHandle of the component POST…
• CVE-2025-70252 - CVSS 7.5 (high), 2026-03-02: An issue was discovered in /goform/WifiWpsStart in Tenda AC6V2.0 V15.03.06.23_multi. The index and mode are controllable. If the conditions are met to…
• CVE-2025-12225 - CVSS 8.8 (high), 2025-10-27: A vulnerability has been found in Tenda AC6 15.03.06.50. This issue affects some unknown processing of the file /goform/WifiGuestSet of the component HTTP…
• CVE-2025-60341 - CVSS 7.5 (high), 2025-10-22: Tenda AC6 V2.0 15.03.06.50 was discovered to contain a stack overflow in the ssid parameter in the fast_setting_wifi_set function. This vulnerability allows…
• CVE-2025-60340 - CVSS 7.5 (high), 2025-10-22: Multiple buffer overflows in the SetClientState function of Tenda AC6 v.15.03.06.50 allows attackers to cause a Denial of Service (DoS) via injecting a…
• CVE-2025-60343 - CVSS 7.5 (high), 2025-10-22: Multiple buffer overflows in the AdvSetMacMtuWan function of Tenda AC6 v.15.03.06.50 allows attackers to cause a Denial of Service (DoS) via injecting a…
• CVE-2025-60342 - CVSS 7.5 (high), 2025-10-22: Tenda AC6 V2.0 15.03.06.50 was discovered to contain a stack overflow in the page parameter in the addressNat function. This vulnerability allows attackers to…
• CVE-2025-60337 - CVSS 7.5 (high), 2025-10-22: Tenda AC6 V2.0 15.03.06.50 was discovered to contain a buffer overflow in the speed_dir parameter in the SetSpeedWan function. This vulnerability allows…
• CVE-2025-60339 - CVSS 7.5 (high), 2025-10-22: Multiple buffer overflow vulnerabilities in the openSchedWifi function of Tenda AC6 v.15.03.06.50 allows attackers to cause a Denial of Service (DoS) via…
• CVE-2025-60338 - CVSS 7.5 (high), 2025-10-22: Tenda AC6 V2.0 15.03.06.50 was discovered to contain a stack overflow in the page parameter in the DhcpListClient function. This vulnerability allows…
• CVE-2025-57296 - CVSS 6.5 (medium), 2025-09-19: Tenda AC6 router firmware 15.03.05.19 contains a command injection vulnerability in the formSetIptv function, which processes requests to the…
• CVE-2025-57528 - CVSS 7.7 (high), 2025-09-19: An issue was discovered in Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01 allowing attackers to cause a denial of service via the funcname, funcpara1,…
• CVE-2025-55495 - CVSS 6.5 (medium), 2025-08-27: Tenda AC6 V15.03.06.23_multi was discovered to contain a buffer overflow via the list parameter in the fromSetIpMacBind function.
• CVE-2025-55482 - CVSS 7.5 (high), 2025-08-20: Tenda AC6 V15.03.06.23_multi is vulnerable to Buffer Overflow in the formSetCfm function.
• CVE-2025-55498 - CVSS 7.5 (high), 2025-08-20: Tenda AC6 V15.03.06.23_multi was discovered to contain a buffer overflow via the time parameter in the fromSetSysTime function.
• CVE-2025-55483 - CVSS 7.5 (high), 2025-08-20: Tenda AC6 V15.03.06.23_multi is vulnerable to Buffer Overflow in the function formSetMacFilterCfg via the parameters macFilterType and deviceList.
• CVE-2025-55503 - CVSS 7.3 (high), 2025-08-20: Tenda AC6 V15.03.06.23_multi has a stack overflow vulnerability via the deviceName parameter in the saveParentControlInfo function.
• CVE-2025-55499 - CVSS 6.5 (medium), 2025-08-20: Tenda AC6 V15.03.06.23_multi was discovered to contain a buffer overflow via the ntpServer parameter in the fromSetSysTime function.
• CVE-2025-32010 - CVSS 9.8 (critical), 2025-08-20: A stack-based buffer overflow vulnerability exists in the Cloud API functionality of Tenda AC6 V5.0 V02.03.01.110. A specially crafted HTTP response can lead…
• CVE-2025-31355 - CVSS 9.8 (critical), 2025-08-20: A firmware update vulnerability exists in the Firmware Signature Validation functionality of Tenda AC6 V5.0 V02.03.01.110. A specially crafted malicious file…
• CVE-2025-30256 - CVSS 8.6 (high), 2025-08-20: A denial of service vulnerability exists in the HTTP Header Parsing functionality of Tenda AC6 V5.0 V02.03.01.110. A specially crafted series of HTTP requests…
• CVE-2025-27129 - CVSS 9.8 (critical), 2025-08-20: An authentication bypass vulnerability exists in the HTTP authentication functionality of Tenda AC6 V5.0 V02.03.01.110. A specially crafted HTTP request can…
• CVE-2025-24496 - CVSS 7.5 (high), 2025-08-20: An information disclosure vulnerability exists in the /goform/getproductInfo functionality of Tenda AC6 V5.0 V02.03.01.110. Specially crafted network packets…
• CVE-2025-24322 - CVSS 9.8 (critical), 2025-08-20: An unsafe default authentication vulnerability exists in the Initial Setup Authentication functionality of Tenda AC6 V5.0 V02.03.01.110. A specially crafted…
• CVE-2025-7914 - CVSS 8.8 (high), 2025-07-21: A vulnerability has been found in Tenda AC6 15.03.06.50 and classified as critical. Affected by this vulnerability is the function setparentcontrolinfo of the…
• CVE-2025-50263 - CVSS 8.1 (high), 2025-07-03: Tenda AC6 v15.03.05.16_multi is vulnerable to Buffer Overflow in the fromSetRouteStatic function via the list parameter.
• CVE-2025-50260 - CVSS 7.5 (high), 2025-07-03: Tenda AC6 v15.03.05.16_multi is vulnerable to Buffer Overflow in the formSetFirewallCfg function via the firewallEn parameter.
• CVE-2025-50262 - CVSS 7.5 (high), 2025-07-03: Tenda AC6 v15.03.05.16_multi is vulnerable to Buffer Overflow in the formSetQosBand function via the list parameter.
• CVE-2025-50258 - CVSS 8.1 (high), 2025-07-03: Tenda AC6 v15.03.05.16_multi is vulnerable to Buffer Overflow in the SetSysTimeCfg function via the time parameter.
• CVE-2025-50641 - CVSS 6.5 (medium), 2025-07-01: Tenda AC6 15.03.05.16_multi is vulnerable to Buffer Overflow in the addWifiMacFilter function via the parameter deviceId.
• CVE-2025-50528 - CVSS 7.3 (high), 2025-06-27: A buffer overflow vulnerability exists in the fromNatStaticSetting function of Tenda AC6 <=V15.03.05.19 via the page parameter.
• CVE-2025-46035 - CVSS 7.5 (high), 2025-06-12: Buffer Overflow vulnerability in Tenda AC6 v.15.03.05.16 allows a remote attacker to cause a denial of service via the oversized schedStartTime and…
• CVE-2025-5855 - CVSS 9.8 (critical), 2025-06-09: A vulnerability, which was classified as critical, was found in Tenda AC6 15.03.05.16. This affects the function formSetRebootTimer of the file…
• CVE-2025-5854 - CVSS 8.8 (high), 2025-06-09: A vulnerability, which was classified as critical, has been found in Tenda AC6 15.03.05.16. Affected by this issue is the function fromadvsetlanip of the file…
• CVE-2025-5853 - CVSS 8.8 (high), 2025-06-09: A vulnerability classified as critical was found in Tenda AC6 15.03.05.16. Affected by this vulnerability is the function formSetSafeWanWebMan of the file…
• CVE-2025-5852 - CVSS 8.8 (high), 2025-06-09: A vulnerability classified as critical has been found in Tenda AC6 15.03.05.16. Affected is the function formSetPPTPUserList of the file…
• CVE-2025-44172 - CVSS 6.5 (medium), 2025-06-02: Tenda AC6 V15.03.05.16 was discovered to contain a stack overflow via the time parameter in the setSmartPowerManagement function.
• CVE-2025-29121 - CVSS 7.5 (high), 2025-03-20: A vulnerability was found in Tenda AC6 V15.03.05.16. The vulnerability affects the functionality of the /goform/fast_setting_wifi_set file…
• CVE-2025-29031 - CVSS 9.8 (critical), 2025-03-14: Tenda AC6 v15.03.05.16 was discovered to contain a buffer overflow via the fromAddressNat function.
• CVE-2025-29030 - CVSS 9.8 (critical), 2025-03-14: Tenda AC6 v15.03.05.16 was discovered to contain a buffer overflow via the formWifiWpsOOB function.
• CVE-2025-29029 - CVSS 9.8 (critical), 2025-03-14: Tenda AC6 v15.03.05.16 was discovered to contain a buffer overflow via the formSetSpeedWan function.
• CVE-2025-1814 - CVSS 9.8 (critical), 2025-03-02: A vulnerability, which was classified as critical, has been found in Tenda AC6 15.03.05.16. Affected by this issue is some unknown functionality of the file…
• CVE-2025-25505 - CVSS 6.5 (medium), 2025-02-21: Tenda AC6 15.03.05.16_multi is vulnerable to Buffer Overflow in the sub_452A4 function.
• CVE-2025-25507 - CVSS 6.5 (medium), 2025-02-21: There is a RCE vulnerability in Tenda AC6 15.03.05.16_multi. In the formexeCommand function, the parameter cmdinput will cause remote command execution.
• CVE-2025-25343 - CVSS 9.8 (critical), 2025-02-12: Tenda AC6 V15.03.05.16 firmware has a buffer overflow vulnerability in the formexeCommand function.
• CVE-2024-46450 - CVSS 8.1 (high), 2025-01-16: Incorrect access control in Tenda AC1200 Smart Dual-Band WiFi Router Model AC6 v2.0 Firmware v15.03.06.50 allows attackers to bypass authentication via a…
• CVE-2025-0349 - CVSS 9.8 (critical), 2025-01-09: A vulnerability classified as critical has been found in Tenda AC6 15.03.05.16. Affected is the function GetParentControlInfo of the file…
• CVE-2024-52273 - CVSS 9.8 (critical), 2024-12-04: Stack-based Buffer Overflow vulnerability in Shenzhen Tenda Technology Co Tenda AC6V2 (setDoublePppoeConfig->guest_ip_check(overflow arg: mask) modules)…
• CVE-2024-52272 - CVSS 9.8 (critical), 2024-12-04: Stack-based Buffer Overflow vulnerability in Shenzhen Tenda Technology Co Tenda AC6V2 (fromAdvSetLanip(overflow arg:lanMask) modules) allows Overflow…
• CVE-2024-52275 - CVSS 9.8 (critical), 2024-12-04: Stack-based Buffer Overflow vulnerability in Shenzhen Tenda Technology Co Tenda AC6V2 (fromWizardHandle modules) allows Overflow Buffers.This issue affects…
• CVE-2024-52274 - CVSS 9.8 (critical), 2024-12-04: Stack-based Buffer Overflow vulnerability in Shenzhen Tenda Technology Co Tenda AC6V2 (setDoubleL2tpConfig->guest_ip_check(overflow arg: mask) modules) allows…
• CVE-2024-52714 - CVSS 9.8 (critical), 2024-11-19: Tenda AC6 v2.0 v15.03.06.50 was discovered to contain a buffer overflow in the function 'fromSetSysTime.
• CVE-2024-51116 - CVSS 8.8 (high), 2024-11-05: Tenda AC6 v2.0 V15.03.06.50 was discovered to contain a buffer overflow in the function 'formSetPPTPServer'.
• CVE-2024-10698 - CVSS 9.8 (critical), 2024-11-02: A vulnerability was found in Tenda AC6 15.03.05.19 and classified as critical. Affected by this issue is the function formSetDeviceName of the file…
• CVE-2024-10697 - CVSS 9.8 (critical), 2024-11-02: A vulnerability has been found in Tenda AC6 15.03.05.19 and classified as critical. Affected by this vulnerability is the function formWriteFacMac of the file…
• CVE-2024-10280 - CVSS 7.5 (high), 2024-10-23: A vulnerability was found in Tenda AC6, AC7, AC8, AC9, AC10, AC10U, AC15, AC18, AC500 and AC1206 up to 20241022. It has been rated as problematic. This issue…
• CVE-2023-24332 - CVSS 8.1 (high), 2024-02-21: A stack overflow vulnerability in Tenda AC6 with firmware version US_AC6V5.0re_V03.03.02.01_cn_TDC01 allows attackers to run arbitrary commands via crafted…
• CVE-2023-38823 - CVSS 9.8 (critical), 2023-11-20: Buffer Overflow vulnerability in Tenda Ac19 v.1.0, AC18, AC9 v.1.0, AC6 v.2.0 and v.1.0 allows a remote attacker to execute arbitrary code via the formSetCfm…
• CVE-2023-40830 - CVSS 9.8 (critical), 2023-10-03: Tenda AC6 v15.03.05.19 is vulnerable to Buffer Overflow as the Index parameter does not verify the length.
• CVE-2021-40546 - CVSS 4.9 (medium), 2023-09-05: Tenda AC6 US_AC6V4.0RTL_V02.03.01.26_cn.bin allows attackers (who have the administrator password) to cause a denial of service (device crash) via a long…
• CVE-2023-40842 - CVSS 9.8 (critical), 2023-08-30: Tengda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via function "R7WebsSecurityHandler."
• CVE-2023-40845 - CVSS 9.8 (critical), 2023-08-30: Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via function 'sub_34FD0.' In the function, it reads user provided…
• CVE-2023-40838 - CVSS 9.8 (critical), 2023-08-30: Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin function 'sub_3A1D0' contains a command execution vulnerability.
• CVE-2023-40841 - CVSS 9.8 (critical), 2023-08-30: Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via function "add_white_node,"
• CVE-2023-40844 - CVSS 9.8 (critical), 2023-08-30: Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via function 'formWifiBasicSet.'
• CVE-2023-40848 - CVSS 9.8 (critical), 2023-08-30: Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via the function "sub_7D858."
• CVE-2023-40837 - CVSS 9.8 (critical), 2023-08-30: Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin function 'sub_ADD50' contains a command execution vulnerability. In the "formSetIptv" function, obtaining…
• CVE-2023-40840 - CVSS 9.8 (critical), 2023-08-30: Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via function "fromGetWirelessRepeat."
• CVE-2023-40843 - CVSS 9.8 (critical), 2023-08-30: Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via function "sub_73004."
• CVE-2023-40847 - CVSS 9.8 (critical), 2023-08-30: Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via the function "initIpAddrInfo." In the function, it reads in a…
• CVE-2023-40839 - CVSS 9.8 (critical), 2023-08-30: Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin function 'sub_ADF3C' contains a command execution vulnerability. In the "formSetIptv" function, obtaining…
• CVE-2023-40846 - CVSS 9.8 (critical), 2023-08-28: Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via function sub_90998.
• CVE-2023-39670 - CVSS 9.8 (critical), 2023-08-18: Tenda AC6 _US_AC6V1.0BR_V15.03.05.16 was discovered to contain a buffer overflow via the function fgets.
• CVE-2023-38933 - CVSS 9.8 (critical), 2023-08-07: Tenda AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0 V15.03.06.28, FH1203 V2.0.1.6 and AC9 V3.0 V15.03.06.42_multi, and FH1205…
• CVE-2023-38937 - CVSS 9.8 (critical), 2023-08-07: Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC8 v4 V16.03.34.06, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, AC5 V1.0 V15.03.06.28, AC9 V3.0…
• CVE-2023-38936 - CVSS 9.8 (critical), 2023-08-07: Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, AC5 V1.0 V15.03.06.28, FH1203 V2.0.1.6, AC9 V3.0…
• CVE-2023-38931 - CVSS 9.8 (critical), 2023-08-07: Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC8 v4 V16.03.34.06, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0 V15.03.06.28,…
• CVE-2022-40010 - CVSS 5.4 (medium), 2023-06-26: Tenda AC6 AC1200 Smart Dual-Band WiFi Router 15.03.06.50_multi was discovered to contain a cross-site scripting (XSS) vulnerability via the deviceId parameter…
• CVE-2023-2923 - CVSS 9.8 (critical), 2023-05-27: A vulnerability classified as critical was found in Tenda AC6 US_AC6V1.0BR_V15.03.05.19. Affected by this vulnerability is the function fromDhcpListClient.…
• CVE-2023-26976 - CVSS 7.5 (high), 2023-04-04: Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the ssid parameter in the form_fast_setting_wifi_set function.
• CVE-2022-45641 - CVSS 7.5 (high), 2022-12-02: Tenda AC6V1.0 V15.03.05.19 is vulnerable to Buffer Overflow via formSetMacFilterCfg.
• CVE-2022-45674 - CVSS 6.5 (medium), 2022-12-02: Tenda AC6V1.0 V15.03.05.19 is vulnerable to Cross Site Request Forgery (CSRF) via function fromSysToolReboot.
• CVE-2022-45673 - CVSS 6.5 (medium), 2022-12-02: Tenda AC6V1.0 V15.03.05.19 is vulnerable to Cross Site Request Forgery (CSRF) via function fromSysToolRestoreSet.
• CVE-2022-45640 - CVSS 7.5 (high), 2022-12-01: Tenda Tenda AC6V1.0 V15.03.05.19 is affected by buffer overflow. Causes a denial of service (local).
• CVE-2022-41485 - CVSS 7.5 (high), 2022-10-13: Tenda AC1200 US_AC6V2.0RTL_V15.03.06.51_multi_TDE01 was discovered to contain a buffer overflow in the 0x47ce00 function. This vulnerability allows attackers…
• CVE-2022-25449 - CVSS 9.8 (critical), 2022-03-18: Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the deviceId parameter in the saveParentControlInfo function.
• CVE-2022-25452 - CVSS 9.8 (critical), 2022-03-18: Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the URLs parameter in the saveParentControlInfo function.
• CVE-2022-25455 - CVSS 9.8 (critical), 2022-03-18: Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the list parameter in the SetIpMacBind function.
• CVE-2022-25458 - CVSS 9.8 (critical), 2022-03-18: Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the cmdinput parameter in the exeCommand function.
• CVE-2022-25461 - CVSS 9.8 (critical), 2022-03-18: Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the startip parameter in the SetPptpServerCfg function.
• CVE-2022-25445 - CVSS 9.8 (critical), 2022-03-18: Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the time parameter in the PowerSaveSet function.
• CVE-2022-25448 - CVSS 9.8 (critical), 2022-03-18: Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the day parameter in the openSchedWifi function.
• CVE-2022-25451 - CVSS 9.8 (critical), 2022-03-18: Tenda AC6 V15.03.05.09_multi was discovered to contain a stack overflow via the list parameter in the setstaticroutecfg function.
• CVE-2022-25454 - CVSS 9.8 (critical), 2022-03-18: Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the loginpwd parameter in the SetFirewallCfg function.