AC
Product
AC18
105
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 47High 50Medium 8Low 0
Watch
Add AC18 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-82695 | 10.0 | Aug 31 | Tenda AC18 Telnet telnet missing authentication Affected: 15.03.05.19 |
| CVE-2026-31255 | 9.8 | Apr 27 | A command injection vulnerability exists in Tenda AC18 V15.03.05.05_multi Affected: 15.03.05.05 |
| CVE-2025-5606 | 9.8 | Jun 4 | A vulnerability was found in Tenda AC18 15.03.05.05 Affected: 15.03.05.05 |
| CVE-2024-57583 | 9.8 | Jan 16 | Tenda AC18 V15.03.05.19 was discovered to contain a command injection vulnerability via the usbName parameter in the formSetSambaConf function Affected: 15.03.05.19 |
| CVE-2024-57582 | 9.8 | Jan 16 | Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the startIP parameter in the formSetPPTPServer function Affected: 15.03.05.19 |
| CVE-2024-57581 | 9.8 | Jan 16 | Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the firewallEn parameter in the formSetFirewallCfg function Affected: 15.03.05.19 |
| CVE-2024-57580 | 9.8 | Jan 16 | Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the devName parameter in the formSetDeviceName function Affected: 15.03.05.19 |
| CVE-2024-57579 | 9.8 | Jan 16 | Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the limitSpeedUp parameter in the formSetClientState function Affected: 15.03.05.19 |
| CVE-2024-57575 | 9.8 | Jan 16 | Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the ssid parameter in the form_fast_setting_wifi_set function Affected: 15.03.05.19 |
| CVE-2024-33835 | 9.8 | May 1 | Tenda AC18 V15.03.05.05 has a stack overflow vulnerability in the remoteIp parameter from formSetSafeWanWebMan function Affected: 15.03.05.05 |
| CVE-2024-28545 | 9.8 | Mar 26 | Tenda AC18 V15.03.05.05 contains a command injection vulnerablility in the deviceName parameter of formsetUsbUnload function Affected: 15.03.05.05 |
| CVE-2024-2854 | 9.8 | Mar 24 | A vulnerability classified as critical has been found in Tenda AC18 15.03.05.05 Affected: 15.03.05.05 |
| CVE-2024-28537 | 9.8 | Mar 18 | Tenda AC18 V15.03.05.05 has a stack overflow vulnerability in the page parameter of fromNatStaticSetting function Affected: 15.03.05.05 |
| CVE-2024-28553 | 9.8 | Mar 12 | Tenda AC18 V15.03.05.05 has a stack overflow vulnerability in the entrys parameter fromAddressNat function Affected: 15.03.05.05 |
| CVE-2024-28535 | 9.8 | Mar 12 | Tenda AC18 V15.03.05.05 has a stack overflow vulnerability in the mitInterface parameter of fromAddressNat function Affected: 15.03.05.05 |
| CVE-2023-38823 | 9.8 | Nov 20 | Buffer Overflow vulnerability in Tenda Ac19 v.1.0, AC18, AC9 v.1.0, AC6 v.2.0 and v.1.0 allows a remote attacker to execute arbitrary code via the formSetCfm function in bin/httpd Affected: 15.03.05.19(6318) |
| CVE-2023-30135 | 9.8 | May 5 | Tenda AC18 v15.03.05.19(6318_)_cn was discovered to contain a command injection vulnerability via the deviceName parameter in the setUsbUnload function Affected: 15.03.05.19(6318)_cn |
| CVE-2023-24170 | 9.8 | Jan 26 | Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via /goform/fromSetWirelessRepeat Affected: 15.03.05.19 |
| CVE-2023-24169 | 9.8 | Jan 26 | Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via /goform/FUN_0007343c Affected: 15.03.05.19 |
| CVE-2023-24167 | 9.8 | Jan 26 | Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via /goform/add_white_node Affected: 15.03.05.19 |
| CVE-2023-24166 | 9.8 | Jan 26 | Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via /goform/formWifiBasicSet Affected: 15.03.05.19 |
| CVE-2023-24165 | 9.8 | Jan 26 | Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via /goform/initIpAddrInfo Affected: 15.03.05.19 |
| CVE-2023-24164 | 9.8 | Jan 26 | Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via /goform/FUN_000c2318 Affected: 15.03.05.19 |
| CVE-2022-44183 | 9.8 | Nov 21 | Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function formSetWifiGuestBasic Affected: 15.03.05.19 |
| CVE-2022-44180 | 9.8 | Nov 21 | Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function addWifiMacFilter Affected: 15.03.05.19 |
| CVE-2022-44178 | 9.8 | Nov 21 | Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow Affected: 15.03.05.19 |
| CVE-2022-44177 | 9.8 | Nov 21 | Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function formWifiWpsStart Affected: 15.03.05.19 |
| CVE-2022-44176 | 9.8 | Nov 21 | Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function fromSetRouteStatic Affected: 15.03.05.19 |
| CVE-2022-44175 | 9.8 | Nov 21 | Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function formSetMacFilterCfg Affected: 15.03.05.19 |
| CVE-2022-44174 | 9.8 | Nov 21 | Tenda AC18 V15.03.05.05 is vulnerable to Buffer Overflow via function formSetDeviceName Affected: 15.03.05.05 |
| CVE-2022-44172 | 9.8 | Nov 21 | Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function R7WebsSecurityHandler Affected: 15.03.05.19 |
| CVE-2022-44171 | 9.8 | Nov 21 | Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function form_fast_setting_wifi_set Affected: 15.03.05.19 |
| CVE-2022-43260 | 9.8 | Oct 18 | Tenda AC18 V15.03.05.19(6318) was discovered to contain a stack overflow via the time parameter in the fromSetSysTime function Affected: 15.03.05.19 |
| CVE-2022-40854 | 9.8 | Sep 23 | Tenda AC18 router contained a stack overflow vulnerability in /goform/fast_setting_wifi_set Affected: 15.03.05.19(6318) |
| CVE-2022-38314 | 9.8 | Sep 7 | Tenda AC18 router v15.03.05.19 and v15.03.05.05 was discovered to contain a stack overflow via the urls parameter at /goform/saveParentControlInfo Affected: 15.03.05.05; 15.03.05.19(6318) |
| CVE-2022-38313 | 9.8 | Sep 7 | Tenda AC18 router v15.03.05.19 and v15.03.05.05 was discovered to contain a stack overflow via the time parameter at /goform/saveParentControlInfo Affected: 15.03.05.05; 15.03.05.19(6318) |
| CVE-2022-38312 | 9.8 | Sep 7 | Tenda AC18 router v15.03.05.19 and v15.03.05.05 was discovered to contain a stack overflow via the list parameter at /goform/SetIpMacBind Affected: 15.03.05.05; 15.03.05.19(6318) |
| CVE-2022-38311 | 9.8 | Sep 7 | Tenda AC18 router v15.03.05.19 and v15.03.05.05 was discovered to contain a stack overflow via the time parameter at /goform/PowerSaveSet Affected: 15.03.05.05; 15.03.05.19(6318) |
| CVE-2022-38310 | 9.8 | Sep 7 | Tenda AC18 router v15.03.05.19 and v15.03.05.05 was discovered to contain a stack overflow via the list parameter at /goform/SetStaticRouteCfg Affected: 15.03.05.05; 15.03.05.19(6318) |
| CVE-2022-38309 | 9.8 | Sep 7 | Tenda AC18 router v15.03.05.19 and v15.03.05.05 was discovered to contain a stack overflow via the list parameter at /goform/SetVirtualServerCfg Affected: 15.03.05.05; 15.03.05.19(6318) |
| CVE-2022-35201 | 9.8 | Aug 19 | Tenda-AC18 V15.03.05.05 was discovered to contain a remote command execution (RCE) vulnerability Affected: 15.03.05.05 |
| CVE-2022-30477 | 9.8 | May 26 | Tenda AC Series Router AC18_V15.03.05.19(6318) was discovered to contain a stack-based buffer overflow in the httpd module when handling /goform/SetClientState request Affected: 15.03.05.19(6318) |
| CVE-2022-30476 | 9.8 | May 26 | Tenda AC Series Router AC18_V15.03.05.19(6318) was discovered to contain a stack-based buffer overflow in the httpd module when handling /goform/SetFirewallCfg request Affected: 15.03.05.19(6318) |
| CVE-2022-30474 | 9.8 | May 26 | Tenda AC Series Router AC18_V15.03.05.19(6318) was discovered to contain a heap overflow in the httpd module when handling /goform/saveParentControlInfo request Affected: 15.03.05.19(6318) |
| CVE-2022-30472 | 9.8 | May 26 | Tenda AC Seris Router AC18_V15.03.05.19(6318) has a stack-based buffer overflow vulnerability in function fromAddressNat Affected: 15.03.05.19(6318) |
| CVE-2018-18729 | 9.8 | Oct 29 | An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices Affected: 15.03.05.19(6318)_cn |
| CVE-2018-18728 | 9.8 | Oct 29 | An issue was discovered on Tenda AC9 V15.03.05.19(6318)_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices Affected: 15.03.05.19(6318)_cn |
| CVE-2026-11528 | 8.8 | Jun 8 | Tenda AC18 Web Management getRebootStatus sub_45304 stack-based overflow Affected: 15.03.05.05 |
| CVE-2025-14993 | 8.8 | Dec 21 | A vulnerability was detected in Tenda AC18 15.03.05.05 Affected: 15.03.05.05 |
| CVE-2025-14992 | 8.8 | Dec 21 | A security vulnerability has been detected in Tenda AC18 15.03.05.05 Affected: 15.03.05.05 |
