AC
Product
AC15
On CISA KEVExploited in the wild
86
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 39High 37Medium 10Low 0
Watch
Add AC15 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-5848 | 8.8 | Jun 8 | A vulnerability was found in Tenda AC15 15.03.05.19_multi and classified as critical Affected: 15.03.05.19_multi |
| CVE-2025-3786 | 8.8 | Apr 18 | A vulnerability was found in Tenda AC15 up to 15.03.05.19 and classified as critical Affected: 15.03.05.19 |
| CVE-2025-0566 | 8.8 | Jan 19 | A vulnerability classified as critical has been found in Tenda AC15 15.13.07.13 Affected: 15.13.07.13 |
| CVE-2024-10662 | 8.8 | Nov 1 | A vulnerability was found in Tenda AC15 15.03.05.19 and classified as critical Affected: 15.03.05.19 |
| CVE-2024-10661 | 8.8 | Nov 1 | A vulnerability has been found in Tenda AC15 15.03.05.19 and classified as critical Affected: 15.03.05.19 |
| CVE-2024-2812 | 8.8 | Mar 22 | A vulnerability was found in Tenda AC15 15.03.05.18/15.03.20_multi Affected: 15.03.05.18; 15.03.05.20_multi |
| CVE-2024-2805 | 8.8 | Mar 22 | A vulnerability was found in Tenda AC15 15.03.05.18/15.03.20_multi Affected: 15.03.05.18; 15.03.05.20_multi |
| CVE-2017-16923 | 8.8 | Nov 21 | Command Injection vulnerability in app_data_center on Shenzhen Tenda Ac9 US_AC9V1.0BR_V15.03.05.14_multi_TD01, Ac9 ac9_kf_V15.03.05.19(6318_)_cn, Ac15… Affected: us_ac15v1.0br_v15.03.05.18_multi_td01; us_ac15v1.0br_v15.03.05.19_multi_td01 |
| CVE-2024-32303 | 8.0 | Apr 17 | Tenda AC15 v15.03.20_multi, v15.03.05.19, and v15.03.05.18 firmware has a stack overflow vulnerability located via the PPW parameter in the fromWizardHandle function Affected: 15.03.05.20_multi; 15.03.05.19; 15.03.05.18 |
| CVE-2024-30645 | 8.0 | Mar 29 | Tenda AC15V1.0 V15.03.20_multi has a command injection vulnerability via the deviceName parameter Affected: 15.03.20_multi |
| CVE-2025-55564 | 7.5 | Aug 21 | Tenda AC15 v15.03.05.19_multi_TD01 has a stack overflow via the list parameter in the fromSetIpMacBind function Affected: 15.03.05.19 |
| CVE-2024-10280 | 7.5 | Oct 23 | A vulnerability was found in Tenda AC6, AC7, AC8, AC9, AC10, AC10U, AC15, AC18, AC500 and AC1206 up to 20241022 Affected: 15.03.05.18; 15.03.05.19 |
| CVE-2022-44156 | 7.5 | Nov 21 | Tenda AC15 V15.03.05.19 is vulnerable to Buffer Overflow via function formSetIpMacBind Affected: 15.03.05.19 |
| CVE-2022-44169 | 7.5 | Nov 21 | Tenda AC15 V15.03.05.18 is vulnerable to Buffer Overflow via function formSetVirtualSer Affected: 15.03.05.18 |
| CVE-2022-44168 | 7.5 | Nov 21 | Tenda AC15 V15.03.05.18 is vulnerable to Buffer Overflow via function fromSetRouteStatic Affected: 15.03.05.18 |
| CVE-2022-44167 | 7.5 | Nov 21 | Tenda AC15 V15.03.05.18 is avulnerable to Buffer Overflow via function formSetPPTPServer Affected: 15.03.05.18 |
| CVE-2022-43259 | 7.5 | Oct 18 | Tenda AC15 V15.03.05.18 was discovered to contain a stack overflow via the timeZone parameter in the form_fast_setting_wifi_set function Affected: 15.03.05.18; 15.03.05.19 |
| CVE-2022-28556 | 7.5 | May 4 | Tenda AC15 US_AC15V1.0BR_V15.03.05.20_multi_TDE01.bin is vulnerable to Buffer Overflow Affected: 15.03.05.20_multi_tde01 |
| CVE-2018-18732 | 7.5 | Oct 29 | An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices Affected: 15.03.05.19_cn |
| CVE-2018-18731 | 7.5 | Oct 29 | An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices Affected: 15.03.05.19_cn |
| CVE-2018-18730 | 7.5 | Oct 29 | An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices Affected: 15.03.05.19_cn |
| CVE-2018-18727 | 7.5 | Oct 29 | An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices Affected: 15.03.05.19_cn |
| CVE-2018-18709 | 7.5 | Oct 29 | An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices Affected: 15.03.05.19_cn |
| CVE-2018-18708 | 7.5 | Oct 29 | An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices Affected: 15.03.05.19_cn |
| CVE-2018-18707 | 7.5 | Oct 29 | An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices Affected: 15.03.05.19_cn |
| CVE-2018-18706 | 7.5 | Oct 29 | An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices Affected: 15.03.05.19_cn |
| CVE-2025-8979 | 6.6 | Aug 14 | A vulnerability was identified in Tenda AC15 15.13.07.13 Affected: 15.13.07.13 |
| CVE-2025-25634 | 6.5 | Mar 5 | A vulnerability has been found in Tenda AC15 15.03.05.19 in the function GetParentControlInfo of the file /goform/GetParentControlInfo Affected: 15.03.05.19 |
| CVE-2024-30840 | 6.5 | Apr 15 | A Stack Overflow vulnerability in Tenda AC15 v15.03.05.18 allows attackers to cause a denial of service via the LISTEN parameter in the fromDhcpListClient function Affected: 15.03.05.18 |
| CVE-2024-2817 | 6.5 | Mar 22 | A vulnerability, which was classified as problematic, has been found in Tenda AC15 15.03.05.18 Affected: 15.03.05.18 |
| CVE-2024-2816 | 6.5 | Mar 22 | A vulnerability classified as problematic was found in Tenda AC15 15.03.05.18 Affected: 15.03.05.18 |
| CVE-2020-10986 | 6.5 | Jul 13 | A CSRF issue in the /goform/SysToolReboot endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers to reboot the device and cause denial of service via a payload… Affected: 15.03.05.19 |
| CVE-2017-16936 | 6.5 | Nov 24 | Directory Traversal vulnerability in app_data_center on Shenzhen Tenda Ac9 US_AC9V1.0BR_V15.03.05.14_multi_TD01, Ac9 ac9_kf_V15.03.05.19(6318_)_cn, Ac15… Affected: us_ac15v1.0br_v15.03.05.18_multi_td01; us_ac15v1.0br_v15.03.05.19_multi_td01 |
| CVE-2020-10989 | 6.1 | Jul 13 | An XSS issue in the /goform/WifiBasicSet endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers to execute malicious payloads via the WifiName POST parameter Affected: 15.03.05.19 |
| CVE-2026-11493 | 5.0 | Jun 8 | Tenda AC15 Samba smb.conf weak password Affected: 15.03.05.19 |
| CVE-2024-30613 | 4.3 | Mar 29 | Tenda AC15 v15.03.05.18 has a stack overflow vulnerability in the time parameter from the setSmartPowerManagement function Affected: 15.03.05.18 |
