AC
Product
AC10
On CISA KEVExploited in the wild
94
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 48High 32Medium 14Low 0
Watch
Add AC10 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-14558 In wildKEV | 9.8 | Oct 30 | Tenda AC7, AC9, and AC10 Routers Command Injection Vulnerability Affected: through 15.03.06.23_cn |
| CVE-2026-19924 | 9.8 | Aug 16 | Tenda AC10 httpd R7WebsSecurityHandler improper authentication Affected: 16.03.10.09_multi_TDE01 |
| CVE-2025-67073 | 9.8 | Dec 17 | A Buffer overflow vulnerability in function fromAdvSetMacMtuWan of bin httpd in Tenda AC10V4.0 V16.03.10.20 allows remote attackers to cause denial of service and possibly code… Affected: 16.03.10.20 |
| CVE-2025-12622 | 9.8 | Nov 3 | A vulnerability was determined in Tenda AC10 16.03.10.13 Affected: 16.03.10.13 |
| CVE-2025-5629 | 9.8 | Jun 5 | A vulnerability, which was classified as critical, was found in Tenda AC10 up to 15.03.06.47 Affected: through 15.03.06.47 |
| CVE-2025-45779 | 9.8 | May 12 | Tenda AC10 V1.0re_V15.03.06.46 is vulnerable to Buffer Overflow in the formSetPPTPUserList handler via the list POST parameter Affected: 15.03.06.46 |
| CVE-2025-25456 | 9.8 | Apr 15 | Tenda AC10 V4.0si_V16.03.10.20 is vulnerable to Buffer Overflow in AdvSetMacMtuWan via mac2 Affected: 16.03.10.20 |
| CVE-2025-25675 | 9.8 | Feb 20 | Tenda AC10 V1.0 V15.03.06.23 has a command injection vulnerablility located in the formexeCommand function Affected: 15.03.06.23 |
| CVE-2025-25674 | 9.8 | Feb 20 | Tenda AC10 V1.0 V15.03.06.23 is vulnerable to Buffer Overflow in form_fast_setting_wifi_set via the parameter ssid Affected: 15.03.06.23 |
| CVE-2024-2856 | 9.8 | Mar 24 | A vulnerability, which was classified as critical, has been found in Tenda AC10 16.03.10.13/16.03.10.20 Affected: 16.03.10.13; 16.03.10.20 |
| CVE-2023-45484 | 9.8 | Nov 29 | Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the shareSpeed parameter in the function fromSetWifiGuestBasic Affected: 16.03.10.13 |
| CVE-2023-45483 | 9.8 | Nov 29 | Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the time parameter in the function compare_parentcontrol_time Affected: 16.03.10.13 |
| CVE-2023-45482 | 9.8 | Nov 29 | Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the urls parameter in the function get_parentControl_list_Info Affected: 16.03.10.13 |
| CVE-2023-45481 | 9.8 | Nov 29 | Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the firewallEn parameter in the function SetFirewallCfg Affected: 16.03.10.13 |
| CVE-2023-45480 | 9.8 | Nov 29 | Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the src parameter in the function sub_47D878 Affected: 16.03.10.13 |
| CVE-2023-45479 | 9.8 | Nov 29 | Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the list parameter in the function sub_49E098 Affected: 16.03.10.13 |
| CVE-2023-42320 | 9.8 | Sep 18 | Buffer Overflow vulnerability in Tenda AC10V4 v.US_AC10V4.0si_V16.03.10.13_cn_TDC01 allows a remote attacker to cause a denial of service via the mac parameter in the… Affected: 16.03.10.13 |
| CVE-2023-38937 | 9.8 | Aug 7 | Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC8 v4 V16.03.34.06, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, AC5 V1.0 V15.03.06.28, AC9 V3.0 V15.03.06.42_multi and AC10… Affected: 15.03.06.23; 16.03.10.13 |
| CVE-2023-38936 | 9.8 | Aug 7 | Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, AC5 V1.0 V15.03.06.28, FH1203 V2.0.1.6, AC9 V3.0 V15.03.06.42_multi and FH1205… Affected: 15.03.06.23 |
| CVE-2023-38935 | 9.8 | Aug 7 | Tenda AC1206 V15.03.06.23, AC8 V4 V16.03.34.06, AC5 V1.0 V15.03.06.28, AC10 v4.0 V16.03.10.13 and AC9 V3.0 V15.03.06.42_multi were discovered to contain a tack overflow via the… Affected: 16.03.10.13 |
| CVE-2023-38933 | 9.8 | Aug 7 | Tenda AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0 V15.03.06.28, FH1203 V2.0.1.6 and AC9 V3.0 V15.03.06.42_multi, and FH1205 V2.0.0.7(775) were… Affected: 15.03.06.23 |
| CVE-2023-38931 | 9.8 | Aug 7 | Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC8 v4 V16.03.34.06, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0 V15.03.06.28, AC10 v4.0 V16.03.10.13… Affected: 15.03.06.23; 16.03.10.13 |
| CVE-2023-37717 | 9.8 | Jul 14 | Tenda F1202 V1.0BR_V1.2.0.20(408) and FH1202_V1.2.0.19_EN, AC10 V1.0, AC1206 V1.0, AC7 V1.0, AC5 V1.0, and AC9 V3.0 were discovered to contain a stack overflow in the page… Affected: 1.0 |
| CVE-2023-37716 | 9.8 | Jul 14 | Tenda F1202 V1.0BR_V1.2.0.20(408) and FH1202_V1.2.0.19_EN, AC10 V1.0, AC1206 V1.0, AC7 V1.0, AC5 V1.0, and AC9 V3.0 were discovered to contain a stack overflow in the page… Affected: 1.0 |
| CVE-2023-37711 | 9.8 | Jul 10 | Tenda AC1206 V15.03.06.23 and AC10 V15.03.06.47 were discovered to contain a stack overflow in the deviceId parameter in the saveParentControlInfo function Affected: 15.03.06.47 |
| CVE-2023-37710 | 9.8 | Jul 10 | Tenda AC1206 V15.03.06.23 and AC10 V15.03.06.47 were discovered to contain a stack overflow in the wpapsk_crypto parameter in the fromSetWirelessRepeat function Affected: 15.03.06.47 |
| CVE-2023-34566 | 9.8 | Jun 8 | Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter time at /goform/saveParentControlInfo Affected: us_ac10v4.0si_v16.03.10.13_cn |
| CVE-2023-27021 | 9.8 | Apr 7 | Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the formSetFirewallCfg function Affected: 16.03.10.13_cn |
| CVE-2023-27020 | 9.8 | Apr 7 | Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the saveParentControlInfo function Affected: 16.03.10.13_cn |
| CVE-2023-27019 | 9.8 | Apr 7 | Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the sub_458FBC function Affected: 16.03.10.13_cn |
| CVE-2023-27018 | 9.8 | Apr 7 | Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the sub_45EC1C function Affected: 16.03.10.13_cn |
| CVE-2023-27017 | 9.8 | Apr 7 | Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the sub_45DC58 function Affected: 16.03.10.13_cn |
| CVE-2023-27016 | 9.8 | Apr 7 | Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the R7WebsSecurityHandler function Affected: 16.03.10.13_cn |
| CVE-2023-27015 | 9.8 | Apr 7 | Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the sub_4A75C0 function Affected: 16.03.10.13_cn |
| CVE-2023-27014 | 9.8 | Apr 7 | Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the sub_46AC38 function Affected: 16.03.10.13_cn |
| CVE-2023-27013 | 9.8 | Apr 7 | Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the get_parentControl_list_Info function Affected: 16.03.10.13_cn |
| CVE-2023-27012 | 9.8 | Apr 7 | Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the setSchedWifi function Affected: 16.03.10.13_cn |
| CVE-2022-42167 | 9.8 | Oct 17 | Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/formSetFirewallCfg Affected: 15.03.06.23 |
| CVE-2022-42163 | 9.8 | Oct 17 | Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/fromNatStaticSetting Affected: 15.03.06.23 |
| CVE-2022-42164 | 9.8 | Oct 17 | Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/formSetClientState Affected: 15.03.06.23 |
| CVE-2022-42165 | 9.8 | Oct 17 | Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/formSetDeviceName Affected: 15.03.06.23 |
| CVE-2022-42166 | 9.8 | Oct 17 | Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/formSetSpeedWan Affected: 15.03.06.23 |
| CVE-2022-42168 | 9.8 | Oct 17 | Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/fromSetIpMacBind Affected: 15.03.06.23 |
| CVE-2022-42169 | 9.8 | Oct 17 | Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/addWifiMacFilter Affected: 15.03.06.23 |
| CVE-2022-42170 | 9.8 | Oct 17 | Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/formWifiWpsStart Affected: 15.03.06.23 |
| CVE-2022-42171 | 9.8 | Oct 17 | Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/saveParentControlInfo Affected: 15.03.06.23 |
| CVE-2022-32054 | 9.8 | Jul 7 | Tenda AC10 US_AC10V1.0RTL_V15.03.06.26_multi_TD01 was discovered to contain a remote code execution (RCE) vulnerability via the lanIp parameter Affected: 15.03.06.26 |
| CVE-2018-18729 | 9.8 | Oct 29 | An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices Affected: 15.03.06.23_cn |
| CVE-2026-16248 | 8.8 | Jul 20 | Tenda AC10 httpd/netctrl AdvSetLanip fromAdvSetLanip stack-based overflow Affected: 16.03.10.09_multi_TDE01 |
| CVE-2026-5550 | 8.8 | Apr 5 | Tenda AC10 httpd fromSysToolChangePwd stack-based overflow Affected: 16.03.10.10_multi_TDE01 |
