AC
Product
AC10
On CISA KEVExploited in the wild
94
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 48High 32Medium 14Low 0
Watch
Add AC10 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-5548 | 8.8 | Apr 5 | Tenda AC10 httpd fromSysToolChangePwd stack-based overflow Affected: 16.03.10.10_multi_TDE01 |
| CVE-2026-5547 | 8.8 | Apr 5 | Tenda AC10 httpd formAddMacfilterRule os command injection Affected: 16.03.10.10_multi_TDE01 |
| CVE-2025-8178 | 8.8 | Jul 26 | A vulnerability classified as critical has been found in Tenda AC10 16.03.10.13 Affected: 16.03.10.13 |
| CVE-2025-3161 | 8.8 | Apr 3 | A vulnerability was found in Tenda AC10 16.03.10.13 and classified as critical Affected: 16.03.10.13 |
| CVE-2024-11248 | 8.8 | Nov 15 | A vulnerability was found in Tenda AC10 16.03.10.13 and classified as critical Affected: 16.03.10.13 |
| CVE-2024-11061 | 8.8 | Nov 11 | A vulnerability classified as critical was found in Tenda AC10 16.03.10.13 Affected: 16.03.10.13 |
| CVE-2024-11056 | 8.8 | Nov 10 | A vulnerability, which was classified as critical, was found in Tenda AC10 16.03.10.13 Affected: 16.03.10.13 |
| CVE-2024-2581 | 8.8 | Mar 18 | A vulnerability was found in Tenda AC10 16.03.10.13 and classified as critical Affected: 16.03.10.13 |
| CVE-2026-5549 | 7.5 | Apr 5 | Tenda AC10 RSA 2048-bit Private Key privkeySrv.pem hard-coded key Affected: 16.03.10.10_multi_TDE01 |
| CVE-2025-57215 | 7.5 | Aug 28 | Tenda AC10 v4.0 firmware v16.03.10.20 was discovered to contain a stack overflow via the function get_parentControl_list_Info Affected: 16.03.10.20 |
| CVE-2025-4896 | 7.5 | May 18 | A vulnerability was found in Tenda AC10 16.03.10.13 and classified as critical Affected: 16.03.10.13 |
| CVE-2025-25455 | 7.5 | Apr 17 | Tenda AC10 V4.0si_V16.03.10.20 is vulnerable to Buffer Overflow in AdvSetMacMtuWan via wanMTU2 Affected: 16.03.10.20 |
| CVE-2025-25454 | 7.5 | Apr 17 | Tenda AC10 V4.0si_V16.03.10.20 is vulnerable to Buffer Overflow in AdvSetMacMtuWan via wanSpeed2 Affected: 16.03.10.20 |
| CVE-2025-25457 | 7.5 | Apr 17 | Tenda AC10 V4.0si_V16.03.10.20 is vulnerable to Buffer Overflow in AdvSetMacMtuWan via cloneType2 Affected: 16.03.10.20 |
| CVE-2024-10280 | 7.5 | Oct 23 | A vulnerability was found in Tenda AC6, AC7, AC8, AC9, AC10, AC10U, AC15, AC18, AC500 and AC1206 up to 20241022 Affected: 16.03.10.13; 16.03.10.20; 16.03.48.19; 16.03.48.23 |
| CVE-2024-33365 | 7.5 | Jul 29 | Buffer Overflow vulnerability in Tenda AC10 v4 US_AC10V4.0si_V16.03.10.20_cn allows a remote attacker to execute arbitrary code via the Virtual_Data_Check function in the… Affected: 16.03.10.20 |
| CVE-2024-32317 | 7.5 | Apr 17 | Tenda AC10 v4.0 V16.03.10.13 and V16.03.10.20 firmware has a stack overflow vulnerability via the adslPwd parameter in the formWanParameterSetting function Affected: 16.03.10.13; 16.03.10.20 |
| CVE-2022-46109 | 7.5 | Dec 16 | Tenda AC15 V15.03.06.23 is vulnerable to Buffer Overflow via function formSetClientState Affected: 15.03.06.23 |
| CVE-2018-14559 | 7.5 | Apr 25 | An issue was discovered on Tenda AC7 devices with firmware through V15.03.06.44_CN(AC7), AC9 devices with firmware through V15.03.05.19(6318)_CN(AC9), and AC10 devices with… Affected: through 15.03.06.23_cn |
| CVE-2018-14557 | 7.5 | Apr 25 | An issue was discovered on Tenda AC7 devices with firmware through V15.03.06.44_CN(AC7), AC9 devices with firmware through V15.03.05.19(6318)_CN(AC9), and AC10 devices with… Affected: through 15.03.06.23_cn |
| CVE-2018-18732 | 7.5 | Oct 29 | An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices Affected: 15.03.06.23_cn |
| CVE-2018-18731 | 7.5 | Oct 29 | An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices Affected: 15.03.06.23_cn |
| CVE-2018-18730 | 7.5 | Oct 29 | An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices Affected: 15.03.06.23_cn |
| CVE-2018-18727 | 7.5 | Oct 29 | An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices Affected: 15.03.06.23_cn |
| CVE-2018-18709 | 7.5 | Oct 29 | An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices Affected: 15.03.06.23_cn |
| CVE-2018-18708 | 7.5 | Oct 29 | An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices Affected: 15.03.06.23_cn |
| CVE-2018-18707 | 7.5 | Oct 29 | An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices Affected: 15.03.06.23_cn |
| CVE-2018-18706 | 7.5 | Oct 29 | An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices Affected: 15.03.06.23_cn |
| CVE-2025-0528 | 7.2 | Jan 17 | A vulnerability, which was classified as critical, has been found in Tenda AC8, AC10 and AC18 16.03.10.20 Affected: 16.03.10.20 |
| CVE-2025-9309 | 7.0 | Aug 21 | A vulnerability was found in Tenda AC10 16.03.10.13 Affected: 16.03.10.13 |
| CVE-2023-34571 | 6.7 | Jun 8 | Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter shareSpeed at /goform/WifiGuestSet Affected: us_ac10v4.0si_v16.03.10.13_cn |
| CVE-2023-34570 | 6.7 | Jun 8 | Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter devName at /goform/SetOnlineDevName Affected: us_ac10v4.0si_v16.03.10.13_cn |
| CVE-2023-34569 | 6.7 | Jun 8 | Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter list at /goform/SetNetControlList Affected: us_ac10v4.0si_v16.03.10.13_cn |
| CVE-2023-34568 | 6.7 | Jun 8 | Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter time at /goform/PowerSaveSet Affected: us_ac10v4.0si_v16.03.10.13_cn |
| CVE-2023-34567 | 6.7 | Jun 8 | Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter list at /goform/SetVirtualServerCfg Affected: us_ac10v4.0si_v16.03.10.13_cn |
| CVE-2025-67074 | 6.5 | Dec 17 | A Buffer overflow vulnerability in function fromAdvSetMacMtuWan of bin httpd in Tenda AC10V4.0 V16.03.10.20 allows remote attackers to cause denial of service and possibly code… Affected: 16.03.10.20 |
| CVE-2025-44175 | 5.4 | May 12 | Tenda AC10 v4 V16.03.10.13 is vulnerable to Buffer Overflow in the GetParentControlInfo function Affected: 16.03.10.13 |
| CVE-2025-57220 | 5.3 | Aug 28 | An input validation flaw in the 'ate' service of Tenda AC10 v4.0 firmware v16.03.10.09_multi_TDE01 to escalate privileges to root via a crafted UDP packet Affected: 16.03.10.09_multi_tde01 |
| CVE-2025-57219 | 5.3 | Aug 28 | Incorrect access control in the endpoint /goform/ate of Tenda AC10 v4.0 firmware v16.03.10.09_multi_TDE01 allows attackers to escalate privileges or access sensitive components… Affected: 16.03.10.09_multi_tde01 |
| CVE-2025-57218 | 5.3 | Aug 28 | Tenda AC10 v4.0 firmware v16.03.10.09_multi_TDE01 was discovered to contain a stack overflow via the security_5g parameter in the function sub_46284C Affected: 16.03.10.09_multi_tde01 |
| CVE-2025-57217 | 5.3 | Aug 28 | Tenda AC10 v4.0 firmware v16.03.10.09_multi_TDE01 was discovered to contain a stack overflow via the Password parameter in the function R7WebsSecurityHandler Affected: 16.03.10.09_multi_tde01 |
| CVE-2025-25458 | 4.6 | Apr 15 | Tenda AC10 V4.0si_V16.03.10.20 is vulnerable to Buffer Overflow in AdvSetMacMtuWan via serverName2 Affected: 16.03.10.20 |
| CVE-2025-25453 | 4.6 | Apr 15 | Tenda AC10 V4.0si_V16.03.10.20 is vulnerable to Buffer Overflow in AdvSetMacMtuWan via serviceName2 Affected: 16.03.10.20 |
| CVE-2024-25373 | 4.6 | Feb 15 | Tenda AC10V4.0 V16.03.10.20 was discovered to contain a stack overflow via the page parameter in the sub_49B384 function Affected: 16.03.10.20 |
