CVE-2020-26728

A vulnerability was discovered in Tenda AC9 v3.0 V15.03.06.42multi and Tenda AC9 V1.0 V15.03.05.196318CN which allows for remote code execution via shell metacharacters in the guestuser field to the fastcall function with a POST request...

CVE-2018-14559

An issue was discovered on Tenda AC7 devices with firmware through V15.03.06.44CNAC7, AC9 devices with firmware through V15.03.05.196318CNAC9, and AC10 devices with firmware through V15.03.06.23CNAC10. A buffer overflow vulnerability exists in the router's web server httpd. When processing the li...

Tenda AC9 formSetSambaConf Function Command Injection Vulnerability

Tenda AC9 is a wireless router from Tenda, a Chinese company. Tenda AC9 suffers from a command injection vulnerability, which arises from the formSetSambaConf function usbname parameter failing to correctly filter the construct command special characters, commands, etc. The vulnerability can be...

Tenda AC9 formsetUsbUnload Function Command Injection Vulnerability

Tenda AC9 is a wireless router from Tenda, a Chinese company. Tenda AC9 suffers from a command injection vulnerability, which arises from the deviceName parameter of the formsetUsbUnload function failing to correctly filter constructed command special characters, commands, etc. The vulnerability...

Tenda AC9 Command Injection Vulnerability

Tenda AC9 is a router firmware. Tenda AC9 suffers from a command injection vulnerability that stems from improper handling of the Telnet function, which could lead to the execution of arbitrary commands. No detailed vulnerability details are provided at this time...

CVE-2025-45042

Tenda AC9 v15.03.05.14 was discovered to contain a command injection vulnerability via the Telnet function...

Tenda AC9 /goform/WifiWpsStart Interface Buffer Overflow Vulnerability

Tenda AC9 is a wireless router from Tenda, a Chinese company. The Tenda AC9 suffers from a buffer overflow vulnerability that originates from /goform/WifiWpsStart failing to properly validate the length and size of input data, which can be exploited by an attacker to execute arbitrary code on the...

Tenda AC9 /goform/SetSysAutoRebbotCfg Interface Buffer Overflow Vulnerability

Tenda AC9 is a wireless router from Tenda, a Chinese company. The Tenda AC9 suffers from a buffer overflow vulnerability that originates from the rebootTime parameter of /goform/SetSysAutoRebbotCfg that fails to properly validate the length of the input data, which can be exploited by an attacker...

Tenda AC9 /goform/WifiBasicSet Interface Buffer Overflow Vulnerability

Tenda AC9 is a wireless router from Tenda, a Chinese company. A buffer overflow vulnerability exists in Tenda AC9 version V15.03.05.14multi, which originates from the /goform/WifiBasicSet security parameter that fails to properly validate the length of the input data, and can be exploited by a...

CVE-2025-45042

Tenda AC9 v15.03.05.14 was discovered to contain a command injection vulnerability via the Telnet function...

CVE-2025-45042

Tenda AC9 v15.03.05.14 was discovered to contain a command injection vulnerability via the Telnet function...

CVE-2025-45042

CVE-2025-45042 describes a command injection vulnerability in Tenda AC9 firmware, specifically v15.03.05.14, triggered via the Telnet function. The issue allows an attacker who can access the device over the network to inject arbitrary commands, leading to potential full compromise of the router ...

CVE-2025-45042

Tenda AC9 v15.03.05.14 was discovered to contain a command injection vulnerability via the Telnet function...

PT-2025-19716 · Tenda · Tenda Ac9

Name of the Vulnerable Software and Affected Versions: Tenda AC9 version 15.03.05.14 Description: A command injection issue was found via the Telnet function. Recommendations: For Tenda AC9 version 15.03.05.14, consider disabling the Telnet function until a patch is available...

CVE-2025-45042

Tenda AC9 v15.03.05.14 was discovered to contain a command injection vulnerability via the Telnet function...

CVE-2025-44877

Tenda AC9 V15.03.06.42multi was found to contain a command injection vulnerability in the formSetSambaConf function via the usbname parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...

CVE-2025-44872

Tenda AC9 V15.03.06.42multi was found to contain a command injection vulnerability in the formsetUsbUnload function via the deviceName parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...

CVE-2025-44877

Tenda AC9 V15.03.06.42multi was found to contain a command injection vulnerability in the formSetSambaConf function via the usbname parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...

CVE-2025-44872

Tenda AC9 V15.03.06.42multi was found to contain a command injection vulnerability in the formsetUsbUnload function via the deviceName parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...

CVE-2025-44872

Tenda AC9 V15.03.06.42multi was found to contain a command injection vulnerability in the formsetUsbUnload function via the deviceName parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...