Login Request a demo
AC
Product
AC9
by Tenda · last CVE Oct 2, 2026
On CISA KEVExploited in the wild
94
CVEs
1
On KEV
9.8
Max CVSS
1
New 30D
Vulnerabilities94In the news0Timeline
Severity mix
Critical 56High 34Medium 4Low 0
Severity
All severities94Critical56High34Medium4Low0
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add AC9 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2018-14558
In wildKEV
9.8
9%
Oct 30
Tenda AC7, AC9, and AC10 Routers Command Injection Vulnerability
Affected: through 15.03.05.19\(6318\)_cn
CVE-2025-45042
9.8
2%
May 5
Tenda AC9 v15.03.05.14 was discovered to contain a command injection vulnerability via the Telnet function
Affected: 15.03.05.14
CVE-2025-44877
9.8
2%
May 2
Tenda AC9 V15.03.06.42_multi was found to contain a command injection vulnerability in the formSetSambaConf function via the usbname parameter
Affected: 15.03.06.42_multi
CVE-2025-44872
9.8
2%
May 2
Tenda AC9 V15.03.06.42_multi was found to contain a command injection vulnerability in the formsetUsbUnload function via the deviceName parameter
Affected: 15.03.06.42_multi
CVE-2025-45429
9.8
1%
Apr 23
In the Tenda ac9 v1.0 router with firmware V15.03.05.14_multi, there is a stack overflow vulnerability in /goform/WifiWpsStart, which may lead to remote arbitrary code execution
Affected: 15.03.05.14_multi
CVE-2025-45428
9.8
1%
Apr 23
In Tenda ac9 v1.0 with firmware V15.03.05.14_multi, the rebootTime parameter of /goform/SetSysAutoRebbotCfg has a stack overflow vulnerability, which can lead to remote arbitrary…
Affected: 15.03.05.14_multi
CVE-2025-45427
9.8
1%
Apr 23
In Tenda AC9 v1.0 with firmware V15.03.05.14_multi, the security parameter of /goform/WifiBasicSet has a stack overflow vulnerability, which can lead to remote arbitrary code…
Affected: 15.03.05.14_multi
CVE-2025-29386
9.8
1%
Mar 14
In Tenda AC9 v1.0 V15.03.05.14_multi, the mac parameter of /goform/AdvSetMacMtuWan has a stack overflow vulnerability, which can lead to remote arbitrary code execution
Affected: 15.03.05.14
CVE-2025-29385
9.8
1%
Mar 14
In Tenda AC9 v1.0 V15.03.05.14_multi, the cloneType parameter of /goform/AdvSetMacMtuWan has a stack overflow vulnerability, which can lead to remote arbitrary code execution
Affected: 15.03.05.14
CVE-2025-29384
9.8
2%
Mar 14
In Tenda AC9 v1.0 V15.03.05.14_multi, the wanMTU parameter of /goform/AdvSetMacMtuWan has a stack overflow vulnerability, which can lead to remote arbitrary code execution
Affected: 15.03.05.14
CVE-2025-22949
9.8
2%
Jan 10
Tenda ac9 v1.0 firmware v15.03.05.19 is vulnerable to command injection in /goform/SetSambaCfg, which may lead to remote arbitrary code execution
Affected: 15.03.05.19
CVE-2025-22946
9.8
1%
Jan 10
Tenda ac9 v1.0 firmware v15.03.05.19 contains a stack overflow vulnerability in /goform/SetOnlineDevName, which may lead to remote arbitrary code execution
Affected: 15.03.05.19
CVE-2024-42634
9.8
2%
Aug 16
A Command Injection vulnerability exists in formWriteFacMac of the httpd binary in Tenda AC9 v15.03.06.42
Affected: 15.03.06.42
CVE-2024-25751
9.8
1%
Feb 26
A Stack Based Buffer Overflow vulnerability in Tenda AC9 v.3.0 with firmware version v.15.03.06.42_multi allows a remote attacker to execute arbitrary code via the fromSetSysTime…
Affected: 5.03.06.42_multi
CVE-2024-24543
9.8
1%
Feb 5
Buffer Overflow vulnerability in the function setSchedWifi in Tenda AC9 v.3.0, firmware version v.15.03.06.42_multi allows a remote attacker to cause a denial of service or run…
Affected: 15.03.06.42_multi
CVE-2023-38823
9.8
1%
Nov 20
Buffer Overflow vulnerability in Tenda Ac19 v.1.0, AC18, AC9 v.1.0, AC6 v.2.0 and v.1.0 allows a remote attacker to execute arbitrary code via the formSetCfm function in bin/httpd
Affected: 15.03.05.19(6318)
CVE-2023-41563
9.8
1%
Aug 30
Tenda AC9 V3.0 V15.03.06.42_multi and Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 were discovered to contain a stack overflow via parameter mac at url /goform/GetParentControlInfo
Affected: 15.03.06.42_multi
CVE-2023-41562
9.8
1%
Aug 30
Tenda AC7 V1.0 V15.03.06.44, Tenda AC9 V3.0 V15.03.06.42_multi, and Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 were discovered to contain a stack overflow via parameter time at url…
Affected: 15.03.06.42_multi
CVE-2023-41561
9.8
1%
Aug 30
Tenda AC9 V3.0 V15.03.06.42_multi and Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 were discovered to contain a stack overflow via parameter startIp and endIp at url…
Affected: 15.03.06.42_multi
CVE-2023-41560
9.8
1%
Aug 30
Tenda AC9 V3.0 V15.03.06.42_multi was discovered to contain a stack overflow via parameter firewallEn at url /goform/SetFirewallCfg
Affected: 15.03.06.42_multi
CVE-2023-41559
9.8
1%
Aug 30
Tenda AC7 V1.0 V15.03.06.44, Tenda AC9 V3.0 V15.03.06.42_multi, and Tenda AC5 V1.0RTL_V15.03.06.28 were discovered to contain a stack overflow via parameter page at url…
Affected: 15.03.06.42_multi
CVE-2023-41556
9.8
1%
Aug 30
Tenda AC7 V1.0 V15.03.06.44, Tenda AC9 V3.0 V15.03.06.42_multi, and Tenda AC5 V1.0RTL_V15.03.06.28 were discovered to contain a stack overflow via parameter list at url…
Affected: 5.03.06.42_multi
CVE-2023-41554
9.8
1%
Aug 30
Tenda AC9 V3.0 V15.03.06.42_multi was discovered to contain a stack overflow via parameter wpapsk_crypto at url /goform/WifiExtraSet
Affected: 5.03.06.42_multi
CVE-2023-41553
9.8
1%
Aug 30
Tenda AC9 V3.0 V15.03.06.42_multi and Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 were discovered to contain a stack overflow via parameter list at url /goform/SetStaticRouteCfg
Affected: 5.03.06.42_multi
CVE-2023-41552
9.8
1%
Aug 30
Tenda AC7 V1.0 V15.03.06.44 and Tenda AC9 V3.0 V15.03.06.42_multi were discovered to contain a stack overflow via parameter ssid at url /goform/fast_setting_wifi_set
Affected: 5.03.06.42_multi
CVE-2023-38937
9.8
1%
Aug 7
Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC8 v4 V16.03.34.06, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, AC5 V1.0 V15.03.06.28, AC9 V3.0 V15.03.06.42_multi and AC10…
Affected: 15.03.06.42_multi
CVE-2023-38936
9.8
1%
Aug 7
Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, AC5 V1.0 V15.03.06.28, FH1203 V2.0.1.6, AC9 V3.0 V15.03.06.42_multi and FH1205…
Affected: 15.03.06.42_multi
CVE-2023-38935
9.8
1%
Aug 7
Tenda AC1206 V15.03.06.23, AC8 V4 V16.03.34.06, AC5 V1.0 V15.03.06.28, AC10 v4.0 V16.03.10.13 and AC9 V3.0 V15.03.06.42_multi were discovered to contain a tack overflow via the…
Affected: 15.03.06.42_multi
CVE-2023-38933
9.8
1%
Aug 7
Tenda AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0 V15.03.06.28, FH1203 V2.0.1.6 and AC9 V3.0 V15.03.06.42_multi, and FH1205 V2.0.0.7(775) were…
Affected: 15.03.06.42_multi
CVE-2023-38930
9.8
1%
Aug 7
Tenda AC7 V1.0,V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0,V15.03.06.28, AC9 V3.0,V15.03.06.42_multi and FH1205 V2.0.0.7(775) were discovered to contain a stack overflow via the…
Affected: 15.03.06.42_multi
CVE-2023-37717
9.8
1%
Jul 14
Tenda F1202 V1.0BR_V1.2.0.20(408) and FH1202_V1.2.0.19_EN, AC10 V1.0, AC1206 V1.0, AC7 V1.0, AC5 V1.0, and AC9 V3.0 were discovered to contain a stack overflow in the page…
Affected: 3.0
CVE-2023-37716
9.8
1%
Jul 14
Tenda F1202 V1.0BR_V1.2.0.20(408) and FH1202_V1.2.0.19_EN, AC10 V1.0, AC1206 V1.0, AC7 V1.0, AC5 V1.0, and AC9 V3.0 were discovered to contain a stack overflow in the page…
Affected: 3.0
CVE-2022-36273
9.8
2%
Aug 16
Tenda AC9 V15.03.2.21_cn is vulnerable to command injection via goform/SetSysTimeCfg
Affected: 15.03.2.21_cn
CVE-2022-28560
9.8
2%
May 3
There is a stack overflow vulnerability in the goform/fast_setting_wifi_set function in the httpd service of Tenda ac9 15.03.2.21_cn router
Affected: 15.03.2.21_cn
CVE-2022-27022
9.8
2%
Apr 7
There is a stack overflow vulnerability in the SetSysTimeCfg() function in the httpd service of Tenda AC9 V15.03.2.21_cn
Affected: 15.03.2.21_cn
CVE-2022-27016
9.8
2%
Apr 7
There is a stack overflow vulnerability in the SetStaticRouteCfg() function in the httpd service of Tenda AC9 15.03.2.21_cn
Affected: 15.03.2.21_cn
CVE-2022-26278
9.8
2%
Mar 28
Tenda AC9 v15.03.2.21_cn was discovered to contain a stack overflow via the time parameter in the PowerSaveSet function
Affected: 15.03.2.21_cn
CVE-2022-25441
9.8
5%
Mar 18
Tenda AC9 v15.03.2.21 was discovered to contain a remote command execution (RCE) vulnerability via the vlanid parameter in the SetIPTVCfg function
Affected: 15.03.2.21
CVE-2022-25440
9.8
2%
Mar 18
Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the ntpserver parameter in the SetSysTimeCfg function
Affected: 15.03.2.21
CVE-2022-25439
9.8
2%
Mar 18
Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the list parameter in the SetIpMacBind function
Affected: 15.03.2.21
CVE-2022-25438
9.8
5%
Mar 18
Tenda AC9 v15.03.2.21 was discovered to contain a remote command execution (RCE) vulnerability via the SetIPTVCfg function
Affected: 15.03.2.21
CVE-2022-25437
9.8
2%
Mar 18
Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the list parameter in the SetVirtualServerCfg function
Affected: 15.03.2.21
CVE-2022-25435
9.8
2%
Mar 18
Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the list parameter in the SetStaticRoutecfg function
Affected: 15.03.2.21
CVE-2022-25434
9.8
9%
Mar 18
Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the firewallen parameter in the SetFirewallCfg function
Affected: 15.03.2.21
CVE-2022-25433
9.8
2%
Mar 18
Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the urls parameter in the saveparentcontrolinfo function
Affected: 15.03.2.21
CVE-2022-25431
9.8
2%
Mar 18
Tenda AC9 v15.03.2.21 was discovered to contain multiple stack overflows via the NPTR, V12, V10 and V11 parameter in the Formsetqosband function
Affected: 15.03.2.21
CVE-2022-25429
9.8
2%
Mar 18
Tenda AC9 v15.03.2.21 was discovered to contain a buffer overflow via the time parameter in the saveparentcontrolinfo function
Affected: 15.03.2.21
CVE-2022-25428
9.8
2%
Mar 18
Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the deviceId parameter in the saveparentcontrolinfo function
Affected: 15.03.2.21
CVE-2022-25427
9.8
2%
Mar 18
Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the schedendtime parameter in the openSchedWifi function
Affected: 15.03.2.21
CVE-2022-25418
9.8
2%
Feb 24
Tenda AC9 V15.03.2.21_cn was discovered to contain a stack overflow via the function openSchedWifi
Affected: v15.03.2.21_cn
Page 1 of 2 · 56 total
12