AC
Product
AC6
109
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 57High 41Medium 11Low 0
Watch
Add AC6 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-8263 | 9.8 | May 11 | Tenda AC6 httpd WifiExtraSet fromSetWirelessRepeat os command injection Affected: 15.03.06.49_multi_TDE01 |
| CVE-2025-52221 | 9.8 | Apr 8 | Tenda AC6 15.03.05.16_multi is vulnerable to Buffer Overflow in the formSetCfm function via the funcname, funcpara1, and funcpara2 parameters Affected: 15.03.05.16_multi |
| CVE-2025-32010 | 9.8 | Aug 20 | A stack-based buffer overflow vulnerability exists in the Cloud API functionality of Tenda AC6 V5.0 V02.03.01.110 Affected: 02.03.01.110 |
| CVE-2025-31355 | 9.8 | Aug 20 | A firmware update vulnerability exists in the Firmware Signature Validation functionality of Tenda AC6 V5.0 V02.03.01.110 Affected: 02.03.01.110 |
| CVE-2025-27129 | 9.8 | Aug 20 | An authentication bypass vulnerability exists in the HTTP authentication functionality of Tenda AC6 V5.0 V02.03.01.110 Affected: 02.03.01.110 |
| CVE-2025-24322 | 9.8 | Aug 20 | An unsafe default authentication vulnerability exists in the Initial Setup Authentication functionality of Tenda AC6 V5.0 V02.03.01.110 Affected: 02.03.01.110 |
| CVE-2025-5855 | 9.8 | Jun 9 | A vulnerability, which was classified as critical, was found in Tenda AC6 15.03.05.16 Affected: 15.03.05.16 |
| CVE-2025-29031 | 9.8 | Mar 14 | Tenda AC6 v15.03.05.16 was discovered to contain a buffer overflow via the fromAddressNat function Affected: 15.03.05.16 |
| CVE-2025-29030 | 9.8 | Mar 14 | Tenda AC6 v15.03.05.16 was discovered to contain a buffer overflow via the formWifiWpsOOB function Affected: 15.03.05.16 |
| CVE-2025-29029 | 9.8 | Mar 14 | Tenda AC6 v15.03.05.16 was discovered to contain a buffer overflow via the formSetSpeedWan function Affected: 15.03.05.16 |
| CVE-2025-1814 | 9.8 | Mar 2 | A vulnerability, which was classified as critical, has been found in Tenda AC6 15.03.05.16 Affected: 15.03.05.16 |
| CVE-2025-25343 | 9.8 | Feb 12 | Tenda AC6 V15.03.05.16 firmware has a buffer overflow vulnerability in the formexeCommand function Affected: 15.03.05.16 |
| CVE-2025-0349 | 9.8 | Jan 9 | Tenda AC6 GetParentControlInfo stack-based overflow Affected: 15.03.05.16 |
| CVE-2024-52275 | 9.8 | Dec 4 | Stack-based Buffer Overflow vulnerability in Shenzhen Tenda Technology Co Tenda AC6V2 (fromWizardHandle modules) allows Overflow Buffers.This issue affects Tenda AC6V2: through… Affected: through 15.03.06.50 |
| CVE-2024-52274 | 9.8 | Dec 4 | Stack-based Buffer Overflow vulnerability in Shenzhen Tenda Technology Co Tenda AC6V2 (setDoubleL2tpConfig->guest_ip_check(overflow arg: mask) modules) allows Overflow… Affected: through 15.03.06.50 |
| CVE-2024-52273 | 9.8 | Dec 4 | Stack-based Buffer Overflow vulnerability in Shenzhen Tenda Technology Co Tenda AC6V2 (setDoublePppoeConfig->guest_ip_check(overflow arg: mask) modules) allows Overflow… Affected: through 15.03.06.50 |
| CVE-2024-52272 | 9.8 | Dec 4 | Stack-based Buffer Overflow vulnerability in Shenzhen Tenda Technology Co Tenda AC6V2 (fromAdvSetLanip(overflow arg:lanMask) modules) allows Overflow Buffers.This issue affects… Affected: through 15.03.06.50 |
| CVE-2024-52714 | 9.8 | Nov 19 | Tenda AC6 v2.0 v15.03.06.50 was discovered to contain a buffer overflow in the function 'fromSetSysTime Affected: 15.03.06.50_multi |
| CVE-2024-10698 | 9.8 | Nov 2 | A vulnerability was found in Tenda AC6 15.03.05.19 and classified as critical Affected: 15.03.05.19 |
| CVE-2024-10697 | 9.8 | Nov 2 | A vulnerability has been found in Tenda AC6 15.03.05.19 and classified as critical Affected: 15.03.05.19 |
| CVE-2023-38823 | 9.8 | Nov 20 | Buffer Overflow vulnerability in Tenda Ac19 v.1.0, AC18, AC9 v.1.0, AC6 v.2.0 and v.1.0 allows a remote attacker to execute arbitrary code via the formSetCfm function in bin/httpd Affected: 15.03.05.19(6318); 15.03.05.19(6318) |
| CVE-2023-40830 | 9.8 | Oct 3 | Tenda AC6 v15.03.05.19 is vulnerable to Buffer Overflow as the Index parameter does not verify the length Affected: 15.03.05.19 |
| CVE-2023-40848 | 9.8 | Aug 30 | Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via the function "sub_7D858." Affected: 15.03.05.16 |
| CVE-2023-40847 | 9.8 | Aug 30 | Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via the function "initIpAddrInfo." In the function, it reads in a user-provided parameter, and… Affected: 15.03.05.16 |
| CVE-2023-40845 | 9.8 | Aug 30 | Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via function 'sub_34FD0.' In the function, it reads user provided parameters and passes… Affected: 15.03.05.16 |
| CVE-2023-40844 | 9.8 | Aug 30 | Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via function 'formWifiBasicSet.' Affected: 15.03.05.16 |
| CVE-2023-40843 | 9.8 | Aug 30 | Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via function "sub_73004." Affected: 15.03.05.16 |
| CVE-2023-40842 | 9.8 | Aug 30 | Tengda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via function "R7WebsSecurityHandler." Affected: 15.03.05.16 |
| CVE-2023-40841 | 9.8 | Aug 30 | Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via function "add_white_node," Affected: 15.03.05.16 |
| CVE-2023-40840 | 9.8 | Aug 30 | Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via function "fromGetWirelessRepeat." Affected: 15.03.05.16 |
| CVE-2023-40839 | 9.8 | Aug 30 | Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin function 'sub_ADF3C' contains a command execution vulnerability Affected: 15.03.05.16 |
| CVE-2023-40838 | 9.8 | Aug 30 | Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin function 'sub_3A1D0' contains a command execution vulnerability Affected: 15.03.05.16 |
| CVE-2023-40837 | 9.8 | Aug 30 | Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin function 'sub_ADD50' contains a command execution vulnerability Affected: 15.03.05.16 |
| CVE-2023-40846 | 9.8 | Aug 28 | Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via function sub_90998 Affected: 15.03.05.16 |
| CVE-2023-39670 | 9.8 | Aug 18 | Tenda AC6 _US_AC6V1.0BR_V15.03.05.16 was discovered to contain a buffer overflow via the function fgets Affected: 15.03.05.16 |
| CVE-2023-38937 | 9.8 | Aug 7 | Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC8 v4 V16.03.34.06, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, AC5 V1.0 V15.03.06.28, AC9 V3.0 V15.03.06.42_multi and AC10… Affected: 15.03.06.23 |
| CVE-2023-38936 | 9.8 | Aug 7 | Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, AC5 V1.0 V15.03.06.28, FH1203 V2.0.1.6, AC9 V3.0 V15.03.06.42_multi and FH1205… Affected: 15.03.06.23 |
| CVE-2023-38933 | 9.8 | Aug 7 | Tenda AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0 V15.03.06.28, FH1203 V2.0.1.6 and AC9 V3.0 V15.03.06.42_multi, and FH1205 V2.0.0.7(775) were… Affected: 15.03.06.23 |
| CVE-2023-38931 | 9.8 | Aug 7 | Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC8 v4 V16.03.34.06, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0 V15.03.06.28, AC10 v4.0 V16.03.10.13… Affected: 15.03.06.23 |
| CVE-2023-2923 | 9.8 | May 27 | A vulnerability classified as critical was found in Tenda AC6 US_AC6V1.0BR_V15.03.05.19 Affected: us_ac6v1.0br_v15.03.05.19 |
| CVE-2022-25461 | 9.8 | Mar 18 | Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the startip parameter in the SetPptpServerCfg function Affected: 15.03.05.09 |
| CVE-2022-25460 | 9.8 | Mar 18 | Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the endip parameter in the SetPptpServerCfg function Affected: 15.03.05.09 |
| CVE-2022-25459 | 9.8 | Mar 18 | Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the S1 parameter in the SetSysTimeCfg function Affected: 15.03.05.09 |
| CVE-2022-25458 | 9.8 | Mar 18 | Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the cmdinput parameter in the exeCommand function Affected: 15.03.05.09 |
| CVE-2022-25457 | 9.8 | Mar 18 | Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the ntpserver parameter in the SetSysTimeCfg function Affected: 15.03.05.09 |
| CVE-2022-25456 | 9.8 | Mar 18 | Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the security_5g parameter in the WifiBasicSet function Affected: 15.03.05.09 |
| CVE-2022-25455 | 9.8 | Mar 18 | Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the list parameter in the SetIpMacBind function Affected: 15.03.05.09 |
| CVE-2022-25454 | 9.8 | Mar 18 | Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the loginpwd parameter in the SetFirewallCfg function Affected: 15.03.05.09 |
| CVE-2022-25453 | 9.8 | Mar 18 | Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the time parameter in the saveParentControlInfo function Affected: 15.03.05.09 |
| CVE-2022-25452 | 9.8 | Mar 18 | Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the URLs parameter in the saveParentControlInfo function Affected: 15.03.05.09 |
