AC
Product
AC15
by Tenda · last CVE Jun 8, 2026
On CISA KEVExploited in the wild
86
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 39High 37Medium 10Low 0
Watch

Add AC15 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-10987
In wildKEV
9.8
80%
Jul 13
Tenda AC1900 Router AC15 Model Remote Code Execution Vulnerability
Affected: 15.03.05.19
CVE-2026-24103
9.8
0%
Mar 3
A buffer overflow vulnerability was discovered in goform/formSetMacFilterCfg in Tenda AC15V1.0 V15.03.05.18_multi
Affected: 15.03.05.18_multi
CVE-2026-24101
9.8
2%
Mar 2
An issue was discovered in goform/formSetIptv in Tenda AC15V1.0 V15.03.05.18_multi
Affected: 15.03.05.18_multi
CVE-2026-24105
9.8
2%
Mar 2
An issue was discovered in goform/formsetUsbUnload in Tenda AC15V1.0 V15.03.05.18_multi
Affected: 15.03.05.18
CVE-2026-3400
9.8
1%
Mar 1
Tenda AC15 TextEditingConversion stack-based overflow
Affected: 15.13.07.0; 15.13.07.1; 15.13.07.2; 15.13.07.3; 15.13.07.4; 15.13.07.5; +8 more
CVE-2025-63666
9.8
0%
Nov 12
Tenda AC15 v15.03.05.18_multi) issues an authentication cookie that exposes the account password hash to the client and uses a short, low-entropy suffix as the session identifier
Affected: 15.03.05.18
CVE-2025-29462
9.8
1%
Apr 3
A buffer overflow vulnerability has been discovered in Tenda Ac15 V15.13.07.13
Affected: 15.13.07.13
CVE-2025-25632
9.8
2%
Mar 5
Tenda AC15 v15.03.05.19 is vulnerable to Command Injection via the handler function in /goform/telnet
Affected: 15.03.05.19
CVE-2023-36103
9.8
1%
Sep 10
Command Injection vulnerability in goform/SetIPTVCfg interface of Tenda AC15 V15.03.05.20 allows remote attackers to run arbitrary commands via crafted POST request
Affected: 15.03.05.20
CVE-2024-2855
9.8
1%
Mar 24
A vulnerability classified as critical was found in Tenda AC15 15.03.05.18/15.03.05.19/15.03.20
Affected: 15.03.05.18; 15.03.05.19; 15.03.20_multi
CVE-2024-2852
9.8
1%
Mar 24
A vulnerability was found in Tenda AC15 15.03.20_multi
Affected: 15.03.20_multi
CVE-2024-2851
9.8
4%
Mar 24
A vulnerability was found in Tenda AC15 15.03.05.18/15.03.20_multi
Affected: 15.03.05.18; 15.03.20_multi
CVE-2024-2850
9.8
1%
Mar 24
A vulnerability was found in Tenda AC15 15.03.05.18 and classified as critical
Affected: 15.03.05.18
CVE-2024-2815
9.8
1%
Mar 22
A vulnerability classified as critical has been found in Tenda AC15 15.03.20_multi
Affected: 15.03.05.20_multi
CVE-2024-2814
9.8
1%
Mar 22
A vulnerability was found in Tenda AC15 15.03.20_multi
Affected: 15.03.05.20_multi
CVE-2024-2813
9.8
1%
Mar 22
A vulnerability was found in Tenda AC15 15.03.20_multi
Affected: 15.03.05.20_multi
CVE-2024-2811
9.8
2%
Mar 22
A vulnerability was found in Tenda AC15 15.03.20_multi and classified as critical
Affected: 15.03.05.20_multi
CVE-2024-2810
9.8
1%
Mar 22
A vulnerability has been found in Tenda AC15 15.03.05.18/15.03.20_multi and classified as critical
Affected: 15.03.05.18; 15.03.05.20_multi
CVE-2024-2809
9.8
2%
Mar 22
A vulnerability, which was classified as critical, was found in Tenda AC15 15.03.05.18/15.03.20_multi
Affected: 15.03.05.18; 15.03.05.20_multi
CVE-2024-2808
9.8
1%
Mar 22
A vulnerability, which was classified as critical, has been found in Tenda AC15 15.03.05.18/15.03.20_multi
Affected: 15.03.05.18; 15.03.05.20_multi
CVE-2024-2807
9.8
1%
Mar 22
A vulnerability classified as critical was found in Tenda AC15 15.03.05.18/15.03.20_multi
Affected: 15.03.05.18; 15.03.05.20_multi
CVE-2024-2806
9.8
1%
Mar 22
A vulnerability classified as critical has been found in Tenda AC15 15.03.05.18/15.03.20_multi
Affected: 15.03.05.18; 15.03.05.20_multi
CVE-2023-39673
9.8
1%
Aug 18
Tenda AC15 V1.0BR_V15.03.05.18_multi_TD01 was discovered to contain a buffer overflow via the function FUN_00010e34()
Affected: 15.03.05.18
CVE-2023-30378
9.8
1%
Apr 24
In Tenda AC15 V15.03.05.19, the function "sub_8EE8" contains a stack-based buffer overflow vulnerability
Affected: 15.03.05.19
CVE-2023-30376
9.8
1%
Apr 24
In Tenda AC15 V15.03.05.19, the function "henan_pppoe_user" contains a stack-based buffer overflow vulnerability
Affected: 15.03.05.19
CVE-2023-30375
9.8
1%
Apr 24
In Tenda AC15 V15.03.05.19, the function "getIfIp" contains a stack-based buffer overflow vulnerability
Affected: 15.03.05.19
CVE-2023-30373
9.8
1%
Apr 24
In Tenda AC15 V15.03.05.19, the function "xian_pppoe_user" contains a stack-based buffer overflow vulnerability
Affected: 15.03.05.19
CVE-2023-30372
9.8
1%
Apr 24
In Tenda AC15 V15.03.05.19, The function "xkjs_ver32" contains a stack-based buffer overflow vulnerability
Affected: 15.03.05.19
CVE-2023-30371
9.8
1%
Apr 24
In Tenda AC15 V15.03.05.19, the function "sub_ED14" contains a stack-based buffer overflow vulnerability
Affected: 15.03.05.19
CVE-2023-30370
9.8
1%
Apr 24
In Tenda AC15 V15.03.05.19, the function GetValue contains a stack-based buffer overflow vulnerability
Affected: 15.03.05.19
CVE-2023-30369
9.8
1%
Apr 24
Tenda AC15 V15.03.05.19 is vulnerable to Buffer Overflow
Affected: 15.03.05.19
CVE-2022-40851
9.8
10%
Sep 23
Tenda AC15 V15.03.05.19 contained a stack overflow via the function fromAddressNat
Affected: 15.03.05.19
CVE-2022-37175
9.8
1%
Aug 19
Tenda ac15 firmware V15.03.05.18 httpd server has stack buffer overflow in /goform/formWifiBasicSet
Affected: 15.03.05.18
CVE-2022-28557
9.8
23%
May 4
There is a command injection vulnerability at the /goform/setsambacfg interface of Tenda AC15 US_AC15V1.0BR_V15.03.05.20_multi_TDE01.bin device web, which can also cooperate with…
Affected: 15.03.05.20_multi_tde01
CVE-2021-44971
9.8
2%
Jan 28
Multiple Tenda devices are affected by authentication bypass, such as AC15V1.0 Firmware V15.03.05.20_multi?AC5V1.0 Firmware V15.03.06.48_multi and so on
Affected: 15.03.05.20_multi
CVE-2020-15916
9.8
3%
Jul 23
goform/AdvSetLanip endpoint on Tenda AC15 AC1900 15.03.05.19 devices allows remote attackers to execute arbitrary system commands via shell metacharacters in the lanIp POST…
Affected: 15.03.05.19
CVE-2020-10988
9.8
3%
Jul 13
A hard-coded telnet credential in the tenda_login binary of Tenda AC15 AC1900 version 15.03.05.19 allows unauthenticated remote attackers to start a telnetd service on the device
Affected: 15.03.05.19
CVE-2018-18729
9.8
1%
Oct 29
An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices
Affected: 15.03.05.19_cn
CVE-2018-18728
9.8
3%
Oct 29
An issue was discovered on Tenda AC9 V15.03.05.19(6318)_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices
Affected: 15.03.05.19_cn
CVE-2026-5830
8.8
1%
Apr 9
Tenda AC15 SysToolChangePwd websGetVar stack-based overflow
Affected: 15.03.05.18
CVE-2026-4975
8.8
1%
Mar 27
Tenda AC15 POST Request setcfm formSetCfm memory corruption
Affected: 15.03.05.19
CVE-2025-11389
8.8
1%
Oct 7
A security flaw has been discovered in Tenda AC15 15.03.05.18
Affected: 15.03.05.18
CVE-2025-11388
8.8
1%
Oct 7
A vulnerability was identified in Tenda AC15 15.03.05.18
Affected: 15.03.05.18
CVE-2025-11387
8.8
1%
Oct 7
A vulnerability was determined in Tenda AC15 15.03.05.18
Affected: 15.03.05.18
CVE-2025-11386
8.8
1%
Oct 7
A vulnerability was found in Tenda AC15 15.03.05.18
Affected: 15.03.05.18
CVE-2025-10443
8.8
5%
Sep 15
A vulnerability was identified in Tenda AC9 and AC15 15.03.05.14/15.03.05.18
Affected: 15.03.05.18
CVE-2025-10442
8.8
9%
Sep 15
A vulnerability was determined in Tenda AC9 and AC15 15.03.05.14
Affected: 15.03.05.14
CVE-2025-5851
8.8
1%
Jun 9
A vulnerability was found in Tenda AC15 15.03.05.19_multi
Affected: 15.03.05.19_multi
CVE-2025-5850
8.8
6%
Jun 8
A vulnerability was found in Tenda AC15 15.03.05.19_multi
Affected: 15.03.05.19_multi
CVE-2025-5849
8.8
1%
Jun 8
A vulnerability was found in Tenda AC15 15.03.05.19_multi
Affected: 15.03.05.19_multi
Page 1 of 2 · 86 total