CVE-2025-65226

Tenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow via the deviceId parameter in /goform/saveParentControlInfo...

CVE-2025-65220: Stack-based Buffer Overflow

Tenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow in: /goform/SetVirtualServerCfg via the list parameter...

PT-2025-47585

Name of the Vulnerable Software and Affected Versions Tenda AC21 version 16.03.08.16 Description The Tenda AC21 router version 16.03.08.16 contains a buffer overflow issue. This occurs in the /goform/SetVirtualServerCfg API endpoint through the list parameter. Recommendations Update to a newer...

CVE-2025-13400

A vulnerability was detected in Tenda CH22 1.0.0.1. Affected is the function formWrlExtraGet of the file /goform/WrlExtraGet. Performing a manipulation of the argument chkHz results in buffer overflow. Remote exploitation of the attack is possible. The exploit is now public and may be used...

EUVD-2025-197817

A security vulnerability has been detected in Tenda CH22 1.0.0.1. This impacts the function fromPptpUserSetting of the file /goform/PPTPUserSetting. The manipulation of the argument delno leads to buffer overflow. The attack is possible to be carried out remotely. The exploit has been disclosed...

CVE-2025-13258: Buffer Copy without Checking Size of Input

A vulnerability was detected in Tenda AC20 up to 16.03.08.12. The impacted element is an unknown function of the file /goform/WifiExtraSet. The manipulation of the argument wpapskcrypto results in buffer overflow. The attack can be launched remotely. The exploit is now public and may be used...

CVE-2025-13288: Buffer Copy without Checking Size of Input

A security vulnerability has been detected in Tenda CH22 1.0.0.1. This impacts the function fromPptpUserSetting of the file /goform/PPTPUserSetting. The manipulation of the argument delno leads to buffer overflow. The attack is possible to be carried out remotely. The exploit has been disclosed...

Tenda AC18 guestSsid Parameter Stack Buffer Overflow Vulnerability

Tenda AC18 is a dual-band wireless router launched by Shenzhen Jixiang Tenda Technology Co. in July 2016, mainly for villas and large home users. Tenda AC18 has a stack buffer overflow vulnerability, which originates from the /goform/WifiGuestSet interface guestSsid parameter fails to correctly...

PT-2025-47551

Name of the Vulnerable Software and Affected Versions Tenda AC21 version 16.03.08.16 Description A flaw exists in Tenda AC21 version 16.03.08.16 related to a stack-based buffer overflow. The issue is located in the file /goform/SetSysTimeCfg. The timeZone/time argument can be manipulated to trigg...

CVE-2025-63835

A stack-based buffer overflow vulnerability was discovered in Tenda AC18 v15.03.05.05multi. The vulnerability exists in the guestSsid parameter of the /goform/WifiGuestSet interface. Remote attackers can exploit this vulnerability by sending oversized data to the guestSsid parameter, leading to...

The vulnerability of the /goform/saveAutoQos function in the microprogramming router Tenda AC15 allows a attacker to execute arbitrary code.

The vulnerability of the /goform/saveAutoQos microprogramming system for Tenda AC15 routers lies in the fact that the operation’s output goes beyond the buffer in memory when processing the enable parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the /goform/WifiGuestSet file in the Tenda AC6 microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the /goform/WifiGuestSet file in the Tenda AC6 microprogramming router software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Tenda AC21 Buffer Overflow Vulnerability

Tenda AC21 is a wireless router product from Tenda. A buffer overflow vulnerability exists in Tenda AC21 version 16.03.08.16, which originates from improper manipulation of the startIp parameter of the formSetPPTPServer function in the /goform/SetPptpServerCfg file. The vulnerability can be...

EUVD-2025-37475

A vulnerability was determined in Tenda AC10 16.03.10.13. Affected by this vulnerability is the function formSysRunCmd of the file /goform/SysRunCmd. This manipulation of the argument getui causes buffer overflow. The attack may be initiated remotely. The exploit has been publicly disclosed and m...

CVE-2025-12622 Tenda AC10 SysRunCmd formSysRunCmd buffer overflow

A vulnerability was determined in Tenda AC10 16.03.10.13. Affected by this vulnerability is the function formSysRunCmd of the file /goform/SysRunCmd. This manipulation of the argument getui causes buffer overflow. The attack may be initiated remotely. The exploit has been publicly disclosed and m...

CVE-2025-12618

A vulnerability has been found in Tenda AC8 16.03.34.06. This impacts an unknown function of the file /goform/DatabaseIniSet. The manipulation of the argument Time leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used...

CVE-2025-12618: Buffer Copy without Checking Size of Input

A vulnerability has been found in Tenda AC8 16.03.34.06. This impacts an unknown function of the file /goform/DatabaseIniSet. The manipulation of the argument Time leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used...

CVE-2025-12596

A security vulnerability has been detected in Tenda AC23 16.03.07.52. Affected is the function saveParentControlInfo of the file /goform/saveParentControlInfo. Such manipulation of the argument Time leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been...

CVE-2025-12596

CVE-2025-12596 affects the Tenda AC23 router (firmware 16.03.07.52). The vulnerability is in the function /goform/saveParentControlInfo, where manipulating the Time parameter can trigger a buffer overflow. The issue allows remote execution and has publicly disclosed exploits. Impact is described ...

The vulnerability of the SetValue() function (/goform/setNotUpgrade) in the Tenda AC18 router software allows a attacker to trigger a service failure.

The vulnerability of the SetValue function /goform/setNotUpgrade in the Tenda AC18 router’s microprogrammed software lies in the possibility of the operation being executed outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failure...