AC
Product
AC6
109
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 57High 41Medium 11Low 0
Watch
Add AC6 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-25451 | 9.8 | Mar 18 | Tenda AC6 V15.03.05.09_multi was discovered to contain a stack overflow via the list parameter in the setstaticroutecfg function Affected: 15.03.05.09 |
| CVE-2022-25450 | 9.8 | Mar 18 | Tenda AC6 V15.03.05.09_multi was discovered to contain a stack overflow via the list parameter in the SetVirtualServerCfg function Affected: 15.03.05.09 |
| CVE-2022-25449 | 9.8 | Mar 18 | Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the deviceId parameter in the saveParentControlInfo function Affected: 15.03.05.09 |
| CVE-2022-25448 | 9.8 | Mar 18 | Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the day parameter in the openSchedWifi function Affected: 15.03.05.09 |
| CVE-2022-25447 | 9.8 | Mar 18 | Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the schedendtime parameter in the openSchedWifi function Affected: 15.03.05.09 |
| CVE-2022-25446 | 9.8 | Mar 18 | Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the schedstarttime parameter in the openSchedWifi function Affected: 15.03.05.09 |
| CVE-2022-25445 | 9.8 | Mar 18 | Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the time parameter in the PowerSaveSet function Affected: 15.03.05.09 |
| CVE-2026-8264 | 8.8 | May 11 | Tenda AC6 httpd WifiApScan formWifiApScan os command injection Affected: 15.03.06.23 |
| CVE-2026-4961 | 8.8 | Mar 27 | Tenda AC6 POST Request QuickIndex formQuickIndex stack-based overflow Affected: 15.03.05.16 |
| CVE-2026-4960 | 8.8 | Mar 27 | Tenda AC6 POST Request WizardHandle fromWizardHandle stack-based overflow Affected: 15.03.05.16 |
| CVE-2025-12225 | 8.8 | Oct 27 | Tenda AC6 HTTP Request WifiGuestSet stack-based overflow Affected: 15.03.06.50 |
| CVE-2025-7914 | 8.8 | Jul 21 | Tenda AC6 httpd setparentcontrolinfo buffer overflow Affected: 15.03.06.50 |
| CVE-2025-5854 | 8.8 | Jun 9 | A vulnerability, which was classified as critical, has been found in Tenda AC6 15.03.05.16 Affected: 15.03.05.16 |
| CVE-2025-5853 | 8.8 | Jun 9 | A vulnerability classified as critical was found in Tenda AC6 15.03.05.16 Affected: 15.03.05.16 |
| CVE-2025-5852 | 8.8 | Jun 9 | A vulnerability classified as critical has been found in Tenda AC6 15.03.05.16 Affected: 15.03.05.16 |
| CVE-2024-51116 | 8.8 | Nov 5 | Tenda AC6 v2.0 V15.03.06.50 was discovered to contain a buffer overflow in the function 'formSetPPTPServer' Affected: 15.03.06.50 |
| CVE-2025-50258 | 8.1 | Jul 3 | Tenda AC6 v15.03.05.16_multi is vulnerable to Buffer Overflow in the SetSysTimeCfg function via the time parameter Affected: 15.03.05.16_multi |
| CVE-2025-50263 | 8.1 | Jul 3 | Tenda AC6 v15.03.05.16_multi is vulnerable to Buffer Overflow in the fromSetRouteStatic function via the list parameter Affected: 15.03.05.16_multi |
| CVE-2024-46450 | 8.1 | Jan 16 | Incorrect access control in Tenda AC1200 Smart Dual-Band WiFi Router Model AC6 v2.0 Firmware v15.03.06.50 allows attackers to bypass authentication via a crafted web request Affected: 15.03.06.50 |
| CVE-2023-24332 | 8.1 | Feb 21 | A stack overflow vulnerability in Tenda AC6 with firmware version US_AC6V5.0re_V03.03.02.01_cn_TDC01 allows attackers to run arbitrary commands via crafted POST request to… Affected: 03.03.02.01_cn_tdc01 |
| CVE-2025-57528 | 7.7 | Sep 19 | An issue was discovered in Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01 allowing attackers to cause a denial of service via the funcname, funcpara1, funcpara2 parameters to the… Affected: 15.03.05.16 |
| CVE-2025-70252 | 7.5 | Mar 2 | An issue was discovered in /goform/WifiWpsStart in Tenda AC6V2.0 V15.03.06.23_multi Affected: 15.03.06.23_multi |
| CVE-2025-60339 | 7.5 | Oct 22 | Multiple buffer overflow vulnerabilities in the openSchedWifi function of Tenda AC6 v.15.03.06.50 allows attackers to cause a Denial of Service (DoS) via injecting a crafted… Affected: 15.03.06.50 |
| CVE-2025-60343 | 7.5 | Oct 22 | Multiple buffer overflows in the AdvSetMacMtuWan function of Tenda AC6 v.15.03.06.50 allows attackers to cause a Denial of Service (DoS) via injecting a crafted payload into the… Affected: 15.03.06.50 |
| CVE-2025-60342 | 7.5 | Oct 22 | Tenda AC6 V2.0 15.03.06.50 was discovered to contain a stack overflow in the page parameter in the addressNat function Affected: 15.03.06.50 |
| CVE-2025-60341 | 7.5 | Oct 22 | Tenda AC6 V2.0 15.03.06.50 was discovered to contain a stack overflow in the ssid parameter in the fast_setting_wifi_set function Affected: 15.03.06.50 |
| CVE-2025-60338 | 7.5 | Oct 22 | Tenda AC6 V2.0 15.03.06.50 was discovered to contain a stack overflow in the page parameter in the DhcpListClient function Affected: 15.03.06.50 |
| CVE-2025-60337 | 7.5 | Oct 22 | Tenda AC6 V2.0 15.03.06.50 was discovered to contain a buffer overflow in the speed_dir parameter in the SetSpeedWan function Affected: 15.03.06.50 |
| CVE-2025-60340 | 7.5 | Oct 22 | Multiple buffer overflows in the SetClientState function of Tenda AC6 v.15.03.06.50 allows attackers to cause a Denial of Service (DoS) via injecting a crafted payload into the… Affected: 15.03.06.50 |
| CVE-2025-24496 | 7.5 | Aug 20 | An information disclosure vulnerability exists in the /goform/getproductInfo functionality of Tenda AC6 V5.0 V02.03.01.110 Affected: 02.03.01.110 |
| CVE-2025-30256 | 7.5 | Aug 20 | A denial of service vulnerability exists in the HTTP Header Parsing functionality of Tenda AC6 V5.0 V02.03.01.110 Affected: 02.03.01.110 |
| CVE-2025-55483 | 7.5 | Aug 20 | Tenda AC6 V15.03.06.23_multi is vulnerable to Buffer Overflow in the function formSetMacFilterCfg via the parameters macFilterType and deviceList Affected: 15.03.06.23 |
| CVE-2025-55498 | 7.5 | Aug 20 | Tenda AC6 V15.03.06.23_multi was discovered to contain a buffer overflow via the time parameter in the fromSetSysTime function Affected: 15.03.06.23_multi |
| CVE-2025-55482 | 7.5 | Aug 20 | Tenda AC6 V15.03.06.23_multi is vulnerable to Buffer Overflow in the formSetCfm function Affected: 15.03.06.23_multi |
| CVE-2025-50262 | 7.5 | Jul 3 | Tenda AC6 v15.03.05.16_multi is vulnerable to Buffer Overflow in the formSetQosBand function via the list parameter Affected: 15.03.05.16_multi |
| CVE-2025-50260 | 7.5 | Jul 3 | Tenda AC6 v15.03.05.16_multi is vulnerable to Buffer Overflow in the formSetFirewallCfg function via the firewallEn parameter Affected: 15.03.05.16_multi |
| CVE-2025-46035 | 7.5 | Jun 12 | Buffer Overflow vulnerability in Tenda AC6 v.15.03.05.16 allows a remote attacker to cause a denial of service via the oversized schedStartTime and schedEndTime parameters in an… Affected: 15.03.05.16 |
| CVE-2025-29121 | 7.5 | Mar 20 | A vulnerability was found in Tenda AC6 V15.03.05.16 Affected: 15.03.05.16 |
| CVE-2024-10280 | 7.5 | Oct 23 | A vulnerability was found in Tenda AC6, AC7, AC8, AC9, AC10, AC10U, AC15, AC18, AC500 and AC1206 up to 20241022 Affected: 15.03.06.23 |
| CVE-2023-26976 | 7.5 | Apr 4 | Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the ssid parameter in the form_fast_setting_wifi_set function Affected: 15.03.05.09 |
| CVE-2022-45641 | 7.5 | Dec 2 | Tenda AC6V1.0 V15.03.05.19 is vulnerable to Buffer Overflow via formSetMacFilterCfg Affected: 15.03.05.19 |
| CVE-2022-45640 | 7.5 | Dec 1 | Tenda Tenda AC6V1.0 V15.03.05.19 is affected by buffer overflow Affected: 15.03.05.19 |
| CVE-2022-41485 | 7.5 | Oct 13 | Tenda AC1200 US_AC6V2.0RTL_V15.03.06.51_multi_TDE01 was discovered to contain a buffer overflow in the 0x47ce00 function Affected: 15.03.06.51_multi_tde01 |
| CVE-2020-28095 | 7.5 | Dec 30 | On Tenda AC1200 (Model AC6) 15.03.06.51_multi devices, a large HTTP POST request sent to the change password API will trigger the router to crash and enter an infinite boot loop Affected: 15.03.06.51 |
| CVE-2025-55503 | 7.3 | Aug 20 | Tenda AC6 V15.03.06.23_multi has a stack overflow vulnerability via the deviceName parameter in the saveParentControlInfo function Affected: 15.03.06.23_multi |
| CVE-2025-50528 | 7.3 | Jun 27 | A buffer overflow vulnerability exists in the fromNatStaticSetting function of Tenda AC6 <=V15.03.05.19 via the page parameter Affected: through 15.03.05.19 |
| CVE-2026-8265 | 7.2 | May 11 | Tenda AC6 httpd getLogFile get_log_file os command injection Affected: 15.03.06.23 |
| CVE-2026-8259 | 7.2 | May 11 | Tenda AC6 httpd telnet os command injection Affected: 2.0; 15.03.06.23 |
| CVE-2025-57296 | 6.5 | Sep 19 | Tenda AC6 router firmware 15.03.05.19 contains a command injection vulnerability in the formSetIptv function, which processes requests to the /goform/SetIPTVCfg web interface Affected: 15.03.05.19 |
| CVE-2025-55495 | 6.5 | Aug 27 | Tenda AC6 V15.03.06.23_multi was discovered to contain a buffer overflow via the list parameter in the fromSetIpMacBind function Affected: 15.03.06.23_multi |
