AC9 vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

AC

Product

AC9

by Tenda · last CVE Oct 2, 2026

On CISA KEVExploited in the wild

94

CVEs

1

On KEV

9.8

Max CVSS

1

New 30D

Vulnerabilities94 In the news0 Timeline

Severity mix

Critical 56High 34Medium 4Low 0

Severity

All severities94 Critical56 High34 Medium4 Low0

Exploitation

On CISA KEV1 Exploited in the wild1

Watch

Add AC9 to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2022-25417	9.8	2%	Feb 24	Tenda AC9 V15.03.2.21_cn was discovered to contain a stack overflow via the function saveparentcontrolinfo Affected: v15.03.2.21_cn
CVE-2022-25414	9.8	10%	Feb 24	Tenda AC9 V15.03.2.21_cn was discovered to contain a stack overflow via the parameter NPTR Affected: v15.03.2.21_cn
CVE-2020-26728	9.8	4%	Feb 11	A vulnerability was discovered in Tenda AC9 v3.0 V15.03.06.42_multi and Tenda AC9 V1.0 V15.03.05.19(6318)_CN which allows for remote code execution via shell metacharacters in the… Affected: 15.03.06.42_multi; 15.03.05.19(6318)_cn
CVE-2018-18729	9.8	1%	Oct 29	An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices Affected: 15.03.05.19(6318)_cn
CVE-2018-18728	9.8	3%	Oct 29	An issue was discovered on Tenda AC9 V15.03.05.19(6318)_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices Affected: 15.03.05.19(6318)_cn
CVE-2026-104611	9.1	0%	Oct 2	Tenda AC9 POST Request fast_setting_internet_set stack-based overflow Affected: 15.03.02.13