AC7 vulnerabilities | LiveThreat CVE Feed

Product

AC7

by Tenda · last CVE Jun 19, 2026

On CISA KEVExploited in the wild

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities72 In the news0 Timeline

Severity mix

Critical 28High 40Medium 4Low 0

Severity

All severities72 Critical28 High40 Medium4 Low0

Exploitation

On CISA KEV1 Exploited in the wild1

Watch

Add AC7 to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2024-2897	8.8	8%	Mar 26	A vulnerability classified as critical has been found in Tenda AC7 15.03.06.44 Affected: 15.03.06.44
CVE-2024-2896	8.8	2%	Mar 26	A vulnerability was found in Tenda AC7 15.03.06.44 Affected: 15.03.06.44
CVE-2024-2895	8.8	2%	Mar 26	A vulnerability was found in Tenda AC7 15.03.06.44 Affected: 15.03.06.44
CVE-2024-2894	8.8	2%	Mar 26	A vulnerability was found in Tenda AC7 15.03.06.44 Affected: 15.03.06.44
CVE-2024-2893	8.8	2%	Mar 26	A vulnerability was found in Tenda AC7 15.03.06.44 and classified as critical Affected: 15.03.06.44
CVE-2024-2892	8.8	2%	Mar 26	A vulnerability has been found in Tenda AC7 15.03.06.44 and classified as critical Affected: 15.03.06.44
CVE-2024-2891	8.8	2%	Mar 26	A vulnerability, which was classified as critical, was found in Tenda AC7 15.03.06.44 Affected: 15.03.06.44
CVE-2024-10280	7.5	1%	Oct 23	A vulnerability was found in Tenda AC6, AC7, AC8, AC9, AC10, AC10U, AC15, AC18, AC500 and AC1206 up to 20241022 Affected: 15.03.06.44
CVE-2018-14559	7.5	1%	Apr 25	An issue was discovered on Tenda AC7 devices with firmware through V15.03.06.44_CN(AC7), AC9 devices with firmware through V15.03.05.19(6318)_CN(AC9), and AC10 devices with… Affected: through 15.03.06.44_cn
CVE-2018-14557	7.5	1%	Apr 25	An issue was discovered on Tenda AC7 devices with firmware through V15.03.06.44_CN(AC7), AC9 devices with firmware through V15.03.05.19(6318)_CN(AC9), and AC10 devices with… Affected: through 15.03.06.44_cn
CVE-2018-18732	7.5	1%	Oct 29	An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices Affected: 15.03.06.44_cn
CVE-2018-18731	7.5	1%	Oct 29	An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices Affected: 15.03.06.44_cn
CVE-2018-18730	7.5	1%	Oct 29	An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices Affected: 15.03.06.44_cn
CVE-2018-18727	7.5	1%	Oct 29	An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices Affected: 15.03.06.44_cn
CVE-2018-18709	7.5	1%	Oct 29	An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices Affected: 15.03.06.44_cn
CVE-2018-18708	7.5	1%	Oct 29	An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices Affected: 15.03.06.44_cn
CVE-2018-18707	7.5	1%	Oct 29	An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices Affected: 15.03.06.44_cn
CVE-2018-18706	7.5	1%	Oct 29	An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices Affected: 15.03.06.44_cn
CVE-2026-24434	6.5	0%	Feb 3	Tenda AC7 Web Interface Lacks CSRF Protections for Admin Actions Affected: through 03.03.03.01
CVE-2026-24426	6.1	0%	Feb 3	Tenda AC7 Reflected XSS via Web Interface Output Encoding Affected: through 03.03.03.01
CVE-2026-24441	5.9	0%	Feb 3	Tenda AC7 Transmits Admin Credentials Without HTTPS Protection Affected: through 03.03.03.01
CVE-2026-24427	5.5	0%	Feb 3	Tenda AC7 Exposes Admin Credentials in Configuration Responses Affected: through 03.03.03.01