AC
Product
AC15
On CISA KEVExploited in the wild
86
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 39High 37Medium 10Low 0
Watch
Add AC15 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-10987 In wildKEV | 9.8 | Jul 13 | Tenda AC1900 Router AC15 Model Remote Code Execution Vulnerability Affected: 15.03.05.19 |
| CVE-2026-24103 | 9.8 | Mar 3 | A buffer overflow vulnerability was discovered in goform/formSetMacFilterCfg in Tenda AC15V1.0 V15.03.05.18_multi Affected: 15.03.05.18_multi |
| CVE-2026-24101 | 9.8 | Mar 2 | An issue was discovered in goform/formSetIptv in Tenda AC15V1.0 V15.03.05.18_multi Affected: 15.03.05.18_multi |
| CVE-2026-24105 | 9.8 | Mar 2 | An issue was discovered in goform/formsetUsbUnload in Tenda AC15V1.0 V15.03.05.18_multi Affected: 15.03.05.18 |
| CVE-2026-3400 | 9.8 | Mar 1 | Tenda AC15 TextEditingConversion stack-based overflow Affected: 15.13.07.0; 15.13.07.1; 15.13.07.2; 15.13.07.3; 15.13.07.4; 15.13.07.5; +8 more |
| CVE-2025-63666 | 9.8 | Nov 12 | Tenda AC15 v15.03.05.18_multi) issues an authentication cookie that exposes the account password hash to the client and uses a short, low-entropy suffix as the session identifier Affected: 15.03.05.18 |
| CVE-2025-29462 | 9.8 | Apr 3 | A buffer overflow vulnerability has been discovered in Tenda Ac15 V15.13.07.13 Affected: 15.13.07.13 |
| CVE-2025-25632 | 9.8 | Mar 5 | Tenda AC15 v15.03.05.19 is vulnerable to Command Injection via the handler function in /goform/telnet Affected: 15.03.05.19 |
| CVE-2023-36103 | 9.8 | Sep 10 | Command Injection vulnerability in goform/SetIPTVCfg interface of Tenda AC15 V15.03.05.20 allows remote attackers to run arbitrary commands via crafted POST request Affected: 15.03.05.20 |
| CVE-2024-2855 | 9.8 | Mar 24 | A vulnerability classified as critical was found in Tenda AC15 15.03.05.18/15.03.05.19/15.03.20 Affected: 15.03.05.18; 15.03.05.19; 15.03.20_multi |
| CVE-2024-2852 | 9.8 | Mar 24 | A vulnerability was found in Tenda AC15 15.03.20_multi Affected: 15.03.20_multi |
| CVE-2024-2851 | 9.8 | Mar 24 | A vulnerability was found in Tenda AC15 15.03.05.18/15.03.20_multi Affected: 15.03.05.18; 15.03.20_multi |
| CVE-2024-2850 | 9.8 | Mar 24 | A vulnerability was found in Tenda AC15 15.03.05.18 and classified as critical Affected: 15.03.05.18 |
| CVE-2024-2815 | 9.8 | Mar 22 | A vulnerability classified as critical has been found in Tenda AC15 15.03.20_multi Affected: 15.03.05.20_multi |
| CVE-2024-2814 | 9.8 | Mar 22 | A vulnerability was found in Tenda AC15 15.03.20_multi Affected: 15.03.05.20_multi |
| CVE-2024-2813 | 9.8 | Mar 22 | A vulnerability was found in Tenda AC15 15.03.20_multi Affected: 15.03.05.20_multi |
| CVE-2024-2811 | 9.8 | Mar 22 | A vulnerability was found in Tenda AC15 15.03.20_multi and classified as critical Affected: 15.03.05.20_multi |
| CVE-2024-2810 | 9.8 | Mar 22 | A vulnerability has been found in Tenda AC15 15.03.05.18/15.03.20_multi and classified as critical Affected: 15.03.05.18; 15.03.05.20_multi |
| CVE-2024-2809 | 9.8 | Mar 22 | A vulnerability, which was classified as critical, was found in Tenda AC15 15.03.05.18/15.03.20_multi Affected: 15.03.05.18; 15.03.05.20_multi |
| CVE-2024-2808 | 9.8 | Mar 22 | A vulnerability, which was classified as critical, has been found in Tenda AC15 15.03.05.18/15.03.20_multi Affected: 15.03.05.18; 15.03.05.20_multi |
| CVE-2024-2807 | 9.8 | Mar 22 | A vulnerability classified as critical was found in Tenda AC15 15.03.05.18/15.03.20_multi Affected: 15.03.05.18; 15.03.05.20_multi |
| CVE-2024-2806 | 9.8 | Mar 22 | A vulnerability classified as critical has been found in Tenda AC15 15.03.05.18/15.03.20_multi Affected: 15.03.05.18; 15.03.05.20_multi |
| CVE-2023-39673 | 9.8 | Aug 18 | Tenda AC15 V1.0BR_V15.03.05.18_multi_TD01 was discovered to contain a buffer overflow via the function FUN_00010e34() Affected: 15.03.05.18 |
| CVE-2023-30378 | 9.8 | Apr 24 | In Tenda AC15 V15.03.05.19, the function "sub_8EE8" contains a stack-based buffer overflow vulnerability Affected: 15.03.05.19 |
| CVE-2023-30376 | 9.8 | Apr 24 | In Tenda AC15 V15.03.05.19, the function "henan_pppoe_user" contains a stack-based buffer overflow vulnerability Affected: 15.03.05.19 |
| CVE-2023-30375 | 9.8 | Apr 24 | In Tenda AC15 V15.03.05.19, the function "getIfIp" contains a stack-based buffer overflow vulnerability Affected: 15.03.05.19 |
| CVE-2023-30373 | 9.8 | Apr 24 | In Tenda AC15 V15.03.05.19, the function "xian_pppoe_user" contains a stack-based buffer overflow vulnerability Affected: 15.03.05.19 |
| CVE-2023-30372 | 9.8 | Apr 24 | In Tenda AC15 V15.03.05.19, The function "xkjs_ver32" contains a stack-based buffer overflow vulnerability Affected: 15.03.05.19 |
| CVE-2023-30371 | 9.8 | Apr 24 | In Tenda AC15 V15.03.05.19, the function "sub_ED14" contains a stack-based buffer overflow vulnerability Affected: 15.03.05.19 |
| CVE-2023-30370 | 9.8 | Apr 24 | In Tenda AC15 V15.03.05.19, the function GetValue contains a stack-based buffer overflow vulnerability Affected: 15.03.05.19 |
| CVE-2023-30369 | 9.8 | Apr 24 | Tenda AC15 V15.03.05.19 is vulnerable to Buffer Overflow Affected: 15.03.05.19 |
| CVE-2022-40851 | 9.8 | Sep 23 | Tenda AC15 V15.03.05.19 contained a stack overflow via the function fromAddressNat Affected: 15.03.05.19 |
| CVE-2022-37175 | 9.8 | Aug 19 | Tenda ac15 firmware V15.03.05.18 httpd server has stack buffer overflow in /goform/formWifiBasicSet Affected: 15.03.05.18 |
| CVE-2022-28557 | 9.8 | May 4 | There is a command injection vulnerability at the /goform/setsambacfg interface of Tenda AC15 US_AC15V1.0BR_V15.03.05.20_multi_TDE01.bin device web, which can also cooperate with… Affected: 15.03.05.20_multi_tde01 |
| CVE-2021-44971 | 9.8 | Jan 28 | Multiple Tenda devices are affected by authentication bypass, such as AC15V1.0 Firmware V15.03.05.20_multi?AC5V1.0 Firmware V15.03.06.48_multi and so on Affected: 15.03.05.20_multi |
| CVE-2020-15916 | 9.8 | Jul 23 | goform/AdvSetLanip endpoint on Tenda AC15 AC1900 15.03.05.19 devices allows remote attackers to execute arbitrary system commands via shell metacharacters in the lanIp POST… Affected: 15.03.05.19 |
| CVE-2020-10988 | 9.8 | Jul 13 | A hard-coded telnet credential in the tenda_login binary of Tenda AC15 AC1900 version 15.03.05.19 allows unauthenticated remote attackers to start a telnetd service on the device Affected: 15.03.05.19 |
| CVE-2018-18729 | 9.8 | Oct 29 | An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices Affected: 15.03.05.19_cn |
| CVE-2018-18728 | 9.8 | Oct 29 | An issue was discovered on Tenda AC9 V15.03.05.19(6318)_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices Affected: 15.03.05.19_cn |
| CVE-2026-5830 | 8.8 | Apr 9 | Tenda AC15 SysToolChangePwd websGetVar stack-based overflow Affected: 15.03.05.18 |
| CVE-2026-4975 | 8.8 | Mar 27 | Tenda AC15 POST Request setcfm formSetCfm memory corruption Affected: 15.03.05.19 |
| CVE-2025-11389 | 8.8 | Oct 7 | A security flaw has been discovered in Tenda AC15 15.03.05.18 Affected: 15.03.05.18 |
| CVE-2025-11388 | 8.8 | Oct 7 | A vulnerability was identified in Tenda AC15 15.03.05.18 Affected: 15.03.05.18 |
| CVE-2025-11387 | 8.8 | Oct 7 | A vulnerability was determined in Tenda AC15 15.03.05.18 Affected: 15.03.05.18 |
| CVE-2025-11386 | 8.8 | Oct 7 | A vulnerability was found in Tenda AC15 15.03.05.18 Affected: 15.03.05.18 |
| CVE-2025-10443 | 8.8 | Sep 15 | A vulnerability was identified in Tenda AC9 and AC15 15.03.05.14/15.03.05.18 Affected: 15.03.05.18 |
| CVE-2025-10442 | 8.8 | Sep 15 | A vulnerability was determined in Tenda AC9 and AC15 15.03.05.14 Affected: 15.03.05.14 |
| CVE-2025-5851 | 8.8 | Jun 9 | A vulnerability was found in Tenda AC15 15.03.05.19_multi Affected: 15.03.05.19_multi |
| CVE-2025-5850 | 8.8 | Jun 8 | A vulnerability was found in Tenda AC15 15.03.05.19_multi Affected: 15.03.05.19_multi |
| CVE-2025-5849 | 8.8 | Jun 8 | A vulnerability was found in Tenda AC15 15.03.05.19_multi Affected: 15.03.05.19_multi |
