AC15 vulnerabilities | LiveThreat CVE Feed

Product

AC15

by Tenda · last CVE Jun 8, 2026

On CISA KEVExploited in the wild

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities86 In the news0 Timeline

Severity mix

Critical 39High 37Medium 10Low 0

Severity

All severities86 Critical39 High37 Medium10 Low0

Exploitation

On CISA KEV1 Exploited in the wild1

Watch

Add AC15 to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-5830	8.8	1%	Apr 9	Tenda AC15 SysToolChangePwd websGetVar stack-based overflow Affected: 15.03.05.18
CVE-2026-4975	8.8	1%	Mar 27	Tenda AC15 POST Request setcfm formSetCfm memory corruption Affected: 15.03.05.19
CVE-2025-11389	8.8	1%	Oct 7	Tenda AC15 saveAutoQos stack-based overflow Affected: 15.03.05.18
CVE-2025-11388	8.8	1%	Oct 7	Tenda AC15 setNotUpgrade stack-based overflow Affected: 15.03.05.18
CVE-2025-11387	8.8	1%	Oct 7	Tenda AC15 fast_setting_pppoe_set stack-based overflow Affected: 15.03.05.18
CVE-2025-11386	8.8	1%	Oct 7	Tenda AC15 POST Parameter SetDDNSCfg stack-based overflow Affected: 15.03.05.18
CVE-2025-10443	8.8	5%	Sep 15	Tenda AC9/AC15 exeCommand formexeCommand buffer overflow Affected: 15.03.05.18
CVE-2025-10442	8.8	9%	Sep 15	Tenda AC9/AC15 exeCommand formexeCommand os command injection Affected: 15.03.05.14
CVE-2025-5851	8.8	1%	Jun 8	Tenda AC15 HTTP POST Request AdvSetLanip fromadvsetlanip buffer overflow Affected: 15.03.05.19_multi
CVE-2025-5850	8.8	6%	Jun 8	Tenda AC15 HTTP POST Request SetLEDCf formsetschedled buffer overflow Affected: 15.03.05.19_multi
CVE-2025-5849	8.8	1%	Jun 8	Tenda AC15 HTTP POST Request SetRemoteWebCfg formSetSafeWanWebMan stack-based overflow Affected: 15.03.05.19_multi
CVE-2025-5848	8.8	1%	Jun 8	Tenda AC15 HTTP POST Request setPptpUserList formSetPPTPUserList buffer overflow Affected: 15.03.05.19_multi
CVE-2025-3786	8.8	1%	Apr 18	Tenda AC15 WifiExtraSet fromSetWirelessRepeat buffer overflow Affected: 15.03.05.19
CVE-2025-0566	8.8	9%	Jan 19	Tenda AC15 SetDevNetName formSetDevNetName stack-based overflow Affected: 15.13.07.13
CVE-2024-10662	8.8	1%	Nov 1	A vulnerability was found in Tenda AC15 15.03.05.19 and classified as critical Affected: 15.03.05.19
CVE-2024-10661	8.8	1%	Nov 1	A vulnerability has been found in Tenda AC15 15.03.05.19 and classified as critical Affected: 15.03.05.19
CVE-2024-2812	8.8	4%	Mar 22	A vulnerability was found in Tenda AC15 15.03.05.18/15.03.20_multi Affected: 15.03.05.18; 15.03.05.20_multi
CVE-2024-2805	8.8	2%	Mar 22	A vulnerability was found in Tenda AC15 15.03.05.18/15.03.20_multi Affected: 15.03.05.18; 15.03.05.20_multi
CVE-2017-16923	8.8	3%	Nov 21	Command Injection vulnerability in app_data_center on Shenzhen Tenda Ac9 US_AC9V1.0BR_V15.03.05.14_multi_TD01, Ac9 ac9_kf_V15.03.05.19(6318_)_cn, Ac15… Affected: us_ac15v1.0br_v15.03.05.18_multi_td01; us_ac15v1.0br_v15.03.05.19_multi_td01
CVE-2024-32303	8.0	0%	Apr 17	Tenda AC15 v15.03.20_multi, v15.03.05.19, and v15.03.05.18 firmware has a stack overflow vulnerability located via the PPW parameter in the fromWizardHandle function Affected: 15.03.05.20_multi; 15.03.05.19; 15.03.05.18
CVE-2024-30645	8.0	1%	Mar 29	Tenda AC15V1.0 V15.03.20_multi has a command injection vulnerability via the deviceName parameter Affected: 15.03.20_multi
CVE-2025-55564	7.5	0%	Aug 21	Tenda AC15 v15.03.05.19_multi_TD01 has a stack overflow via the list parameter in the fromSetIpMacBind function Affected: 15.03.05.19
CVE-2024-10280	7.5	1%	Oct 23	A vulnerability was found in Tenda AC6, AC7, AC8, AC9, AC10, AC10U, AC15, AC18, AC500 and AC1206 up to 20241022 Affected: 15.03.05.18; 15.03.05.19
CVE-2022-44156	7.5	1%	Nov 21	Tenda AC15 V15.03.05.19 is vulnerable to Buffer Overflow via function formSetIpMacBind Affected: 15.03.05.19
CVE-2022-44169	7.5	1%	Nov 21	Tenda AC15 V15.03.05.18 is vulnerable to Buffer Overflow via function formSetVirtualSer Affected: 15.03.05.18
CVE-2022-44168	7.5	1%	Nov 21	Tenda AC15 V15.03.05.18 is vulnerable to Buffer Overflow via function fromSetRouteStatic Affected: 15.03.05.18
CVE-2022-44167	7.5	1%	Nov 21	Tenda AC15 V15.03.05.18 is avulnerable to Buffer Overflow via function formSetPPTPServer Affected: 15.03.05.18
CVE-2022-43259	7.5	1%	Oct 18	Tenda AC15 V15.03.05.18 was discovered to contain a stack overflow via the timeZone parameter in the form_fast_setting_wifi_set function Affected: 15.03.05.18; 15.03.05.19
CVE-2022-28556	7.5	1%	May 4	Tenda AC15 US_AC15V1.0BR_V15.03.05.20_multi_TDE01.bin is vulnerable to Buffer Overflow Affected: 15.03.05.20_multi_tde01
CVE-2018-18732	7.5	1%	Oct 29	An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices Affected: 15.03.05.19_cn
CVE-2018-18731	7.5	1%	Oct 29	An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices Affected: 15.03.05.19_cn
CVE-2018-18730	7.5	1%	Oct 29	An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices Affected: 15.03.05.19_cn
CVE-2018-18727	7.5	1%	Oct 29	An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices Affected: 15.03.05.19_cn
CVE-2018-18709	7.5	1%	Oct 29	An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices Affected: 15.03.05.19_cn
CVE-2018-18708	7.5	1%	Oct 29	An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices Affected: 15.03.05.19_cn
CVE-2018-18707	7.5	1%	Oct 29	An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices Affected: 15.03.05.19_cn
CVE-2018-18706	7.5	1%	Oct 29	An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices Affected: 15.03.05.19_cn