AC
Product
AC6
by Tenda · last CVE May 11, 2026
109
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 57High 41Medium 11Low 0
Watch

Add AC6 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-25451
9.8
2%
Mar 18
Tenda AC6 V15.03.05.09_multi was discovered to contain a stack overflow via the list parameter in the setstaticroutecfg function
Affected: 15.03.05.09
CVE-2022-25450
9.8
12%
Mar 18
Tenda AC6 V15.03.05.09_multi was discovered to contain a stack overflow via the list parameter in the SetVirtualServerCfg function
Affected: 15.03.05.09
CVE-2022-25449
9.8
2%
Mar 18
Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the deviceId parameter in the saveParentControlInfo function
Affected: 15.03.05.09
CVE-2022-25448
9.8
2%
Mar 18
Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the day parameter in the openSchedWifi function
Affected: 15.03.05.09
CVE-2022-25447
9.8
2%
Mar 18
Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the schedendtime parameter in the openSchedWifi function
Affected: 15.03.05.09
CVE-2022-25446
9.8
2%
Mar 18
Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the schedstarttime parameter in the openSchedWifi function
Affected: 15.03.05.09
CVE-2022-25445
9.8
9%
Mar 18
Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the time parameter in the PowerSaveSet function
Affected: 15.03.05.09
CVE-2026-8264
8.8
3%
May 11
Tenda AC6 httpd WifiApScan formWifiApScan os command injection
Affected: 15.03.06.23
CVE-2026-4961
8.8
1%
Mar 27
Tenda AC6 POST Request QuickIndex formQuickIndex stack-based overflow
Affected: 15.03.05.16
CVE-2026-4960
8.8
1%
Mar 27
Tenda AC6 POST Request WizardHandle fromWizardHandle stack-based overflow
Affected: 15.03.05.16
CVE-2025-12225
8.8
1%
Oct 27
Tenda AC6 HTTP Request WifiGuestSet stack-based overflow
Affected: 15.03.06.50
CVE-2025-7914
8.8
1%
Jul 21
Tenda AC6 httpd setparentcontrolinfo buffer overflow
Affected: 15.03.06.50
CVE-2025-5854
8.8
1%
Jun 9
A vulnerability, which was classified as critical, has been found in Tenda AC6 15.03.05.16
Affected: 15.03.05.16
CVE-2025-5853
8.8
7%
Jun 9
A vulnerability classified as critical was found in Tenda AC6 15.03.05.16
Affected: 15.03.05.16
CVE-2025-5852
8.8
1%
Jun 9
A vulnerability classified as critical has been found in Tenda AC6 15.03.05.16
Affected: 15.03.05.16
CVE-2024-51116
8.8
0%
Nov 5
Tenda AC6 v2.0 V15.03.06.50 was discovered to contain a buffer overflow in the function 'formSetPPTPServer'
Affected: 15.03.06.50
CVE-2025-50258
8.1
0%
Jul 3
Tenda AC6 v15.03.05.16_multi is vulnerable to Buffer Overflow in the SetSysTimeCfg function via the time parameter
Affected: 15.03.05.16_multi
CVE-2025-50263
8.1
0%
Jul 3
Tenda AC6 v15.03.05.16_multi is vulnerable to Buffer Overflow in the fromSetRouteStatic function via the list parameter
Affected: 15.03.05.16_multi
CVE-2024-46450
8.1
0%
Jan 16
Incorrect access control in Tenda AC1200 Smart Dual-Band WiFi Router Model AC6 v2.0 Firmware v15.03.06.50 allows attackers to bypass authentication via a crafted web request
Affected: 15.03.06.50
CVE-2023-24332
8.1
1%
Feb 21
A stack overflow vulnerability in Tenda AC6 with firmware version US_AC6V5.0re_V03.03.02.01_cn_TDC01 allows attackers to run arbitrary commands via crafted POST request to…
Affected: 03.03.02.01_cn_tdc01
CVE-2025-57528
7.7
0%
Sep 19
An issue was discovered in Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01 allowing attackers to cause a denial of service via the funcname, funcpara1, funcpara2 parameters to the…
Affected: 15.03.05.16
CVE-2025-70252
7.5
0%
Mar 2
An issue was discovered in /goform/WifiWpsStart in Tenda AC6V2.0 V15.03.06.23_multi
Affected: 15.03.06.23_multi
CVE-2025-60339
7.5
0%
Oct 22
Multiple buffer overflow vulnerabilities in the openSchedWifi function of Tenda AC6 v.15.03.06.50 allows attackers to cause a Denial of Service (DoS) via injecting a crafted…
Affected: 15.03.06.50
CVE-2025-60343
7.5
0%
Oct 22
Multiple buffer overflows in the AdvSetMacMtuWan function of Tenda AC6 v.15.03.06.50 allows attackers to cause a Denial of Service (DoS) via injecting a crafted payload into the…
Affected: 15.03.06.50
CVE-2025-60342
7.5
0%
Oct 22
Tenda AC6 V2.0 15.03.06.50 was discovered to contain a stack overflow in the page parameter in the addressNat function
Affected: 15.03.06.50
CVE-2025-60341
7.5
0%
Oct 22
Tenda AC6 V2.0 15.03.06.50 was discovered to contain a stack overflow in the ssid parameter in the fast_setting_wifi_set function
Affected: 15.03.06.50
CVE-2025-60338
7.5
0%
Oct 22
Tenda AC6 V2.0 15.03.06.50 was discovered to contain a stack overflow in the page parameter in the DhcpListClient function
Affected: 15.03.06.50
CVE-2025-60337
7.5
0%
Oct 22
Tenda AC6 V2.0 15.03.06.50 was discovered to contain a buffer overflow in the speed_dir parameter in the SetSpeedWan function
Affected: 15.03.06.50
CVE-2025-60340
7.5
0%
Oct 22
Multiple buffer overflows in the SetClientState function of Tenda AC6 v.15.03.06.50 allows attackers to cause a Denial of Service (DoS) via injecting a crafted payload into the…
Affected: 15.03.06.50
CVE-2025-24496
7.5
0%
Aug 20
An information disclosure vulnerability exists in the /goform/getproductInfo functionality of Tenda AC6 V5.0 V02.03.01.110
Affected: 02.03.01.110
CVE-2025-30256
7.5
0%
Aug 20
A denial of service vulnerability exists in the HTTP Header Parsing functionality of Tenda AC6 V5.0 V02.03.01.110
Affected: 02.03.01.110
CVE-2025-55483
7.5
0%
Aug 20
Tenda AC6 V15.03.06.23_multi is vulnerable to Buffer Overflow in the function formSetMacFilterCfg via the parameters macFilterType and deviceList
Affected: 15.03.06.23
CVE-2025-55498
7.5
0%
Aug 20
Tenda AC6 V15.03.06.23_multi was discovered to contain a buffer overflow via the time parameter in the fromSetSysTime function
Affected: 15.03.06.23_multi
CVE-2025-55482
7.5
0%
Aug 20
Tenda AC6 V15.03.06.23_multi is vulnerable to Buffer Overflow in the formSetCfm function
Affected: 15.03.06.23_multi
CVE-2025-50262
7.5
0%
Jul 3
Tenda AC6 v15.03.05.16_multi is vulnerable to Buffer Overflow in the formSetQosBand function via the list parameter
Affected: 15.03.05.16_multi
CVE-2025-50260
7.5
0%
Jul 3
Tenda AC6 v15.03.05.16_multi is vulnerable to Buffer Overflow in the formSetFirewallCfg function via the firewallEn parameter
Affected: 15.03.05.16_multi
CVE-2025-46035
7.5
1%
Jun 12
Buffer Overflow vulnerability in Tenda AC6 v.15.03.05.16 allows a remote attacker to cause a denial of service via the oversized schedStartTime and schedEndTime parameters in an…
Affected: 15.03.05.16
CVE-2025-29121
7.5
0%
Mar 20
A vulnerability was found in Tenda AC6 V15.03.05.16
Affected: 15.03.05.16
CVE-2024-10280
7.5
1%
Oct 23
A vulnerability was found in Tenda AC6, AC7, AC8, AC9, AC10, AC10U, AC15, AC18, AC500 and AC1206 up to 20241022
Affected: 15.03.06.23
CVE-2023-26976
7.5
16%
Apr 4
Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the ssid parameter in the form_fast_setting_wifi_set function
Affected: 15.03.05.09
CVE-2022-45641
7.5
1%
Dec 2
Tenda AC6V1.0 V15.03.05.19 is vulnerable to Buffer Overflow via formSetMacFilterCfg
Affected: 15.03.05.19
CVE-2022-45640
7.5
1%
Dec 1
Tenda Tenda AC6V1.0 V15.03.05.19 is affected by buffer overflow
Affected: 15.03.05.19
CVE-2022-41485
7.5
1%
Oct 13
Tenda AC1200 US_AC6V2.0RTL_V15.03.06.51_multi_TDE01 was discovered to contain a buffer overflow in the 0x47ce00 function
Affected: 15.03.06.51_multi_tde01
CVE-2020-28095
7.5
1%
Dec 30
On Tenda AC1200 (Model AC6) 15.03.06.51_multi devices, a large HTTP POST request sent to the change password API will trigger the router to crash and enter an infinite boot loop
Affected: 15.03.06.51
CVE-2025-55503
7.3
0%
Aug 20
Tenda AC6 V15.03.06.23_multi has a stack overflow vulnerability via the deviceName parameter in the saveParentControlInfo function
Affected: 15.03.06.23_multi
CVE-2025-50528
7.3
0%
Jun 27
A buffer overflow vulnerability exists in the fromNatStaticSetting function of Tenda AC6 <=V15.03.05.19 via the page parameter
Affected: through 15.03.05.19
CVE-2026-8265
7.2
5%
May 11
Tenda AC6 httpd getLogFile get_log_file os command injection
Affected: 15.03.06.23
CVE-2026-8259
7.2
5%
May 11
Tenda AC6 httpd telnet os command injection
Affected: 2.0; 15.03.06.23
CVE-2025-57296
6.5
3%
Sep 19
Tenda AC6 router firmware 15.03.05.19 contains a command injection vulnerability in the formSetIptv function, which processes requests to the /goform/SetIPTVCfg web interface
Affected: 15.03.05.19
CVE-2025-55495
6.5
0%
Aug 27
Tenda AC6 V15.03.06.23_multi was discovered to contain a buffer overflow via the list parameter in the fromSetIpMacBind function
Affected: 15.03.06.23_multi
Page 2 of 3 · 109 total