AC18 vulnerabilities | LiveThreat CVE Feed

Product

AC18

by Tenda · last CVE Aug 31, 2026

105

CVEs

On KEV

10.0

Max CVSS

New 30D

Vulnerabilities105 In the news0 Timeline

Severity mix

Critical 47High 50Medium 8Low 0

Severity

All severities105 Critical47 High50 Medium8 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add AC18 to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-11528	8.8	0%	Jun 8	Tenda AC18 Web Management getRebootStatus sub_45304 stack-based overflow Affected: 15.03.05.05
CVE-2025-14993	8.8	1%	Dec 21	Tenda AC18 HTTP Request SetDlnaCfg sprintf stack-based overflow Affected: 15.03.05.05
CVE-2025-14992	8.8	1%	Dec 21	Tenda AC18 HTTP Request GetParentControlInfo strcpy stack-based overflow Affected: 15.03.05.05
CVE-2025-63835	8.8	1%	Nov 10	A stack-based buffer overflow vulnerability was discovered in Tenda AC18 v15.03.05.05_multi Affected: 15.03.05.05
CVE-2025-11328	8.8	1%	Oct 6	A vulnerability was detected in Tenda AC18 15.03.05.19(6318) Affected: 15.03.05.19(6318)
CVE-2025-11327	8.8	1%	Oct 6	A security vulnerability has been detected in Tenda AC18 15.03.05.19(6318) Affected: 15.03.05.19(6318)
CVE-2025-11326	8.8	1%	Oct 6	A weakness has been identified in Tenda AC18 15.03.05.19(6318) Affected: 15.03.05.19(6318)
CVE-2025-11325	8.8	1%	Oct 6	A security flaw has been discovered in Tenda AC18 15.03.05.19(6318) Affected: 15.03.05.19(6318)
CVE-2025-11324	8.8	1%	Oct 6	A vulnerability was identified in Tenda AC18 15.03.05.19(6318) Affected: 15.03.05.19(6318)
CVE-2025-11123	8.8	1%	Sep 28	A flaw has been found in Tenda AC18 15.03.05.19 Affected: 15.03.05.19
CVE-2025-11122	8.8	1%	Sep 28	A vulnerability was detected in Tenda AC18 15.03.05.19 Affected: 15.03.05.19
CVE-2025-11121	8.8	4%	Sep 28	A security vulnerability has been detected in Tenda AC18 15.03.05.19 Affected: 15.03.05.19
CVE-2025-11120	8.8	4%	Sep 28	A weakness has been identified in Tenda AC8 16.03.34.06 Affected: 16.03.34.06
CVE-2025-9023	8.8	1%	Aug 15	A vulnerability has been found in Tenda AC7 and AC18 15.03.05.19/15.03.06.44 Affected: 15.03.05.19
CVE-2025-5609	8.8	1%	Jun 4	A vulnerability classified as critical was found in Tenda AC18 15.03.05.05 Affected: 15.03.05.05
CVE-2025-5608	8.8	1%	Jun 4	A vulnerability classified as critical has been found in Tenda AC18 15.03.05.05 Affected: 15.03.05.05
CVE-2025-5607	8.8	1%	Jun 4	A vulnerability was found in Tenda AC18 15.03.05.05 Affected: 15.03.05.05
CVE-2024-57578	8.8	1%	Jan 16	Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the funcpara1 parameter in the formSetCfm function Affected: 15.03.05.19
CVE-2024-33181	8.8	1%	Jul 16	Tenda AC18 V15.03.3.10_EN was discovered to contain a stack-based buffer overflow vulnerability via the deviceMac parameter at ip/goform/addWifiMacFilter Affected: 15.03.3.10_en
CVE-2024-30891	8.8	2%	Apr 5	A command injection vulnerability exists in /goform/exeCommand in Tenda AC18 v15.03.05.05, which allows attackers to construct cmdinput parameters for arbitrary command execution Affected: 15.03.05.05
CVE-2024-2558	8.8	1%	Mar 17	A vulnerability was found in Tenda AC18 15.03.05.05 Affected: 15.03.05.05
CVE-2024-2547	8.8	1%	Mar 17	A vulnerability was found in Tenda AC18 15.03.05.05 and classified as critical Affected: 15.03.05.05
CVE-2024-2546	8.8	1%	Mar 17	A vulnerability has been found in Tenda AC18 15.13.07.09 and classified as critical Affected: 15.13.07.09
CVE-2024-2490	8.8	2%	Mar 15	A vulnerability classified as critical was found in Tenda AC18 15.03.05.05 Affected: 15.03.05.05
CVE-2024-2489	8.8	2%	Mar 15	A vulnerability classified as critical has been found in Tenda AC18 15.03.05.05 Affected: 15.03.05.05
CVE-2024-2488	8.8	2%	Mar 15	A vulnerability was found in Tenda AC18 15.03.05.05 Affected: 15.03.05.05
CVE-2024-2487	8.8	2%	Mar 15	A vulnerability was found in Tenda AC18 15.03.05.05 Affected: 15.03.05.05
CVE-2024-2486	8.8	2%	Mar 15	A vulnerability was found in Tenda AC18 15.03.05.05 Affected: 15.03.05.05
CVE-2024-2485	8.8	2%	Mar 15	A vulnerability was found in Tenda AC18 15.03.05.05 and classified as critical Affected: 15.03.05.05
CVE-2017-16923	8.8	3%	Nov 21	Command Injection vulnerability in app_data_center on Shenzhen Tenda Ac9 US_AC9V1.0BR_V15.03.05.14_multi_TD01, Ac9 ac9_kf_V15.03.05.19(6318_)_cn, Ac15… Affected: us_ac18v1.0br_v15.03.05.05_multi_td01; ac18_kf_v15.03.05.19(6318_)_cn
CVE-2024-34974	8.2	1%	May 14	Tenda AC18 v15.03.05.19 is vulnerable to Buffer Overflow in the formSetPPTPServer function via the endIp parameter Affected: 15.03.05.19
CVE-2024-41630	7.6	1%	Jul 31	Stack-based buffer overflow vulnerability in Tenda AC18 V15.03.3.10_EN allows a remote attacker to execute arbitrary code via the ssid parameter at ip/goform/fast_setting_wifi_set Affected: 15.03.3.10_en
CVE-2025-60663	7.5	0%	Oct 2	Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the wanMTU parameter in the fromAdvSetMacMtuWan function Affected: 15.03.05.19
CVE-2025-60662	7.5	0%	Oct 2	Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the wanSpeed parameter in the fromAdvSetMacMtuWan function Affected: 15.03.05.19
CVE-2025-60660	7.5	0%	Oct 2	Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the mac parameter in the fromAdvSetMacMtuWan function Affected: 15.03.05.19
CVE-2024-10280	7.5	1%	Oct 23	A vulnerability was found in Tenda AC6, AC7, AC8, AC9, AC10, AC10U, AC15, AC18, AC500 and AC1206 up to 20241022 Affected: 15.03.05.05; 15.03.05.19(6318)
CVE-2024-28551	7.5	1%	Mar 26	Tenda AC18 V15.03.05.05 has a stack overflow vulnerability in the ssid parameter of form_fast_setting_wifi_set function Affected: 15.03.05.05
CVE-2022-30475	7.5	1%	May 26	Tenda AC Series Router AC18_V15.03.05.19(6318) was discovered to contain a stack-based buffer overflow in the httpd module when handling /goform/WifiExtraSet request Affected: 15.03.05.19(6318)
CVE-2022-30473	7.5	1%	May 26	Tenda AC Series Router AC18_V15.03.05.19(6318) has a stack-based buffer overflow vulnerability in function form_fast_setting_wifi_set Affected: 15.03.05.19(6318)
CVE-2018-18732	7.5	1%	Oct 29	An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices Affected: 15.03.05.19(6318)_cn
CVE-2018-18731	7.5	1%	Oct 29	An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices Affected: 15.03.05.19(6318)_cn
CVE-2018-18730	7.5	1%	Oct 29	An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices Affected: 15.03.05.19(6318)_cn
CVE-2018-18727	7.5	1%	Oct 29	An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices Affected: 15.03.05.19(6318)_cn
CVE-2018-18709	7.5	1%	Oct 29	An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices Affected: 15.03.05.19(6318)_cn
CVE-2018-18708	7.5	1%	Oct 29	An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices Affected: 15.03.05.19(6318)_cn
CVE-2018-18707	7.5	1%	Oct 29	An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices Affected: 15.03.05.19(6318)_cn
CVE-2018-18706	7.5	1%	Oct 29	An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices Affected: 15.03.05.19(6318)_cn
CVE-2025-8182	7.4	1%	Jul 26	A vulnerability has been found in Tenda AC18 15.03.05.19 and classified as problematic Affected: 15.03.05.19
CVE-2025-0528	7.2	6%	Jan 17	A vulnerability, which was classified as critical, has been found in Tenda AC8, AC10 and AC18 16.03.10.20 Affected: 16.03.10.20
CVE-2022-40861	7.2	1%	Sep 23	Tenda AC18 router V15.03.05.19 contains a stack overflow vulnerability in the formSetQosBand->FUN_0007db78 function with the request /goform/SetNetControlList/ Affected: 15.03.05.19(6318)