CVE-2025-5863

CVE-2025-5863 – Tenda AC5 formSetRebootTimer buffer overflow . Affected device: Tenda AC5 (firmware 15.03.06.47). The flaw is in the function /goform/SetRebootTimer, where manipulating the rebootTime argument triggers a stack-based buffer overflow. Impact: remote code execution with high/critical...

CVE-2025-5855

The CVE-2025-5855 issue affects Tenda AC6, version 15.03.05.16, in the /goform/SetRebootTimer endpoint specifically the formSetRebootTimer function. Exploitation arises from feeding rebootTime, causing a stack-based buffer overflow. It is exploitable remotely and the exploit has been publicly dis...