CVE-2025-25507

There is a RCE vulnerability in Tenda AC6 15.03.05.16multi. In the formexeCommand function, the parameter cmdinput will cause remote command execution...

CVE-2025-25507

The Tenda AC6 wireless router (firmware version 15.03.05.16_multi ) is vulnerable to Remote Code Execution (RCE) via the formexeCommand function. The root cause is the cmdinput parameter's failure to properly filter special elements during code generation. An unauthenticated remote attacker can e...