Tenda AC15 security vulnerabilities

Tenda AC15 is a dual-band wireless router launched by Shenzhen Jixiang Tenda Technology Co. in October 2015, which supports 802.11ac protocol and is mainly designed for home network environment. Tenda AC15 has a stack buffer overflow vulnerability, which originates from the parameter ddnsEn in th...

PT-2025-40968

Name of the Vulnerable Software and Affected Versions Tenda AC23 versions prior to 16.03.07.52 Description A flaw exists in the sscanf function within the /goform/SetStaticRouteCfg file. Manipulation of the argument list can lead to a buffer overflow, potentially allowing for remote attacks. The...

PT-2025-40978

Name of the Vulnerable Software and Affected Versions Tenda AC15 version 15.03.05.18 Description A stack-based buffer overflow exists in Tenda AC15 routers. The issue is due to the manipulation of the Password argument within the file '/goform/fast setting pppoe set'. This can be exploited...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986327)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986327 advisory. In the Linux kernel, the following vulnerability has been resolved: media: pci: cx23885: Fix the error handling in cx23885initdev When the driver fails to call the...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986323)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986323 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: gadget: rndis: prevent integer overflow in rndissetresponse If BufOffset is very large the...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987252)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987252 advisory. In the Linux kernel, the following vulnerability has been resolved: cgroup: Use separate src/dst nodes when preloading csssets for migration Each cset cssset is pinn...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987235)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987235 advisory. In the Linux kernel, the following vulnerability has been resolved: media: pci: cx23885: Fix the error handling in cx23885initdev When the driver fails to call the...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414670)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414670 advisory. A flaw was found in the JFS filesystem code in the Linux Kernel which allows a local attacker with the ability to set extended attributes to panic the system, causin...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986980)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986980 advisory. In the Linux kernel, the following vulnerability has been resolved: bcache: avoid journal no-space deadlock by reserving 1 journal bucket The journal no-space deadlo...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987137)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987137 advisory. In the Linux kernel, the following vulnerability has been resolved: perf/core: Fix data race between perfeventsetoutput and perfmmapclose Yang Jihing reported a rac...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987384)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987384 advisory. In the Linux kernel, the following vulnerability has been resolved: net: sched: fix memory leak in tcindexpartialdestroywork Syzbot reported memory leak in...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986874)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986874 advisory. In the Linux kernel, the following vulnerability has been resolved: pinctrl: aspeed: Fix potential NULL dereference in aspeedpinmuxsetmux pdesc could be null but sti...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986963)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986963 advisory. In the Linux kernel, the following vulnerability has been resolved: ubifs: Fix races between xattrset|get and listxattr operations UBIFS may occur some problems with...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414649)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414649 advisory. A double free bug in packetsetring in net/packet/afpacket.c can be exploited by a local user through crafted syscalls to escalate privileges or deny service. We...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-380530)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-380530 advisory. In the Linux kernel, the following vulnerability has been resolved: ubifs: Set page uptodate in the correct place Page cache reads are lockless, so setting the fresh...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986357)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986357 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: gadget: rndis: prevent integer overflow in rndissetresponse If BufOffset is very large the...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mod_security (UTSA-2025-593903)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-593903 advisory. The OWASP ModSecurity Core Rule Set CRS is affected by a partial rule set bypass for HTTP multipart requests by submitting a payload that uses a character encoding...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414399)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414399 advisory. An issue was discovered in the Linux kernel through 5.18.9. A type confusion bug in nftseteleminit leading to a buffer overflow could be used by a local attacker to...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986461)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986461 advisory. In the Linux kernel, the following vulnerability has been resolved: ACPI: scan: Fix a memory leak in an error handling path If 'acpidevicesetname' fails, we must fre...

CVE-2025-11328 Tenda AC18 SetDDNSCfg stack-based overflow

A vulnerability was detected in Tenda AC18 15.03.05.196318. This issue affects some unknown processing of the file /goform/SetDDNSCfg. The manipulation of the argument ddnsEn results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit is now public and may be...