AC
Product
AC9
On CISA KEVExploited in the wild
94
CVEs
1
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 56High 34Medium 4Low 0
Watch
Add AC9 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-6016 | 8.8 | Apr 10 | Tenda AC9 POST Request WizardHandle decodePwd stack-based overflow Affected: 15.03.02.13 |
| CVE-2026-6015 | 8.8 | Apr 10 | Tenda AC9 POST Request QuickIndex formQuickIndex stack-based overflow Affected: 15.03.02.13 |
| CVE-2025-10443 | 8.8 | Sep 15 | A vulnerability was identified in Tenda AC9 and AC15 15.03.05.14/15.03.05.18 Affected: 15.03.05.14 |
| CVE-2025-10442 | 8.8 | Sep 15 | A vulnerability was determined in Tenda AC9 and AC15 15.03.05.14 Affected: 15.03.05.14 |
| CVE-2025-5847 | 8.8 | Jun 8 | A vulnerability has been found in Tenda AC9 15.03.02.13 and classified as critical Affected: 15.03.2.13 |
| CVE-2025-5839 | 8.8 | Jun 7 | A vulnerability, which was classified as critical, has been found in Tenda AC9 15.03.02.13 Affected: 15.03.2.13 |
| CVE-2024-25753 | 8.8 | Feb 22 | Stack Based Buffer Overflow vulnerability in Tenda AC9 v.3.0 with firmware version v.15.03.06.42_multi allows a remote attacker to execute arbitrary code via the formSetDeviceName… Affected: 5.03.06.42_multi |
| CVE-2024-25748 | 8.8 | Feb 22 | A Stack Based Buffer Overflow vulnerability in tenda AC9 AC9 v.3.0 with firmware version v.15.03.06.42_multi allows a remote attacker to execute arbitrary code via the… Affected: 5.03.06.42_multi |
| CVE-2024-25746 | 8.8 | Feb 22 | Stack Based Buffer Overflow vulnerability in Tenda AC9 v.3.0 with firmware version v.15.03.06.42_multi allows a remote attacker to execute arbitrary code via the add_white_node… Affected: 5.03.06.42_multi |
| CVE-2022-36569 | 8.8 | Aug 31 | Tenda AC9 V15.03.05.19 was discovered to contain a stack overflow via the deviceList parameter at /goform/setMacFilterCfg Affected: 15.03.05.19 |
| CVE-2022-36568 | 8.8 | Aug 31 | Tenda AC9 V15.03.05.19 was discovered to contain a stack overflow via the list parameter at /goform/setPptpUserList Affected: 15.03.05.19 |
| CVE-2017-16923 | 8.8 | Nov 21 | Command Injection vulnerability in app_data_center on Shenzhen Tenda Ac9 US_AC9V1.0BR_V15.03.05.14_multi_TD01, Ac9 ac9_kf_V15.03.05.19(6318_)_cn, Ac15… Affected: us_ac9v1.0br_v15.03.05.14_multi_td01; ac9_kf_v15.03.05.19(6318_)_cn |
| CVE-2024-25756 | 8.0 | Feb 22 | A Stack Based Buffer Overflow vulnerability in Tenda AC9 v.3.0 with firmware version v.15.03.06.42_multi allows a remote attacker to execute arbitrary code via the… Affected: 5.03.06.42_multi |
| CVE-2025-14286 | 7.5 | Dec 9 | A vulnerability was determined in Tenda AC9 15.03.05.14_multi Affected: 15.03.05.14_multi |
| CVE-2025-57638 | 7.5 | Sep 23 | Buffer overflow vulnerability in Tenda AC9 1.0 via the user supplied sys.vendor configuration value Affected: 1.0 |
| CVE-2024-10280 | 7.5 | Oct 23 | A vulnerability was found in Tenda AC6, AC7, AC8, AC9, AC10, AC10U, AC15, AC18, AC500 and AC1206 up to 20241022 Affected: 15.03.2.13; 15.03.05.14; 15.03.05.19(6318); 15.03.06.42 |
| CVE-2018-14559 | 7.5 | Apr 25 | An issue was discovered on Tenda AC7 devices with firmware through V15.03.06.44_CN(AC7), AC9 devices with firmware through V15.03.05.19(6318)_CN(AC9), and AC10 devices with… Affected: through 15.03.05.19\(6318\)_cn |
| CVE-2018-14557 | 7.5 | Apr 25 | An issue was discovered on Tenda AC7 devices with firmware through V15.03.06.44_CN(AC7), AC9 devices with firmware through V15.03.05.19(6318)_CN(AC9), and AC10 devices with… Affected: through 15.03.05.19\(6318\)_cn |
| CVE-2018-18732 | 7.5 | Oct 29 | An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices Affected: 15.03.05.19(6318)_cn |
| CVE-2018-18731 | 7.5 | Oct 29 | An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices Affected: 15.03.05.19(6318)_cn |
| CVE-2018-18730 | 7.5 | Oct 29 | An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices Affected: 15.03.05.19(6318)_cn |
| CVE-2018-18727 | 7.5 | Oct 29 | An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices Affected: 15.03.05.19(6318)_cn |
| CVE-2018-18709 | 7.5 | Oct 29 | An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices Affected: 15.03.05.19(6318)_cn |
| CVE-2018-18708 | 7.5 | Oct 29 | An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices Affected: 15.03.05.19(6318)_cn |
| CVE-2018-18707 | 7.5 | Oct 29 | An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices Affected: 15.03.05.19(6318)_cn |
| CVE-2018-18706 | 7.5 | Oct 29 | An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices Affected: 15.03.05.19(6318)_cn |
| CVE-2026-86300 | 7.3 | Sep 7 | Tenda AC9 Web Management R7WebsSecurityHandler improper authentication Affected: 15.03.05.14 |
| CVE-2026-2192 | 7.2 | Feb 8 | Tenda AC9 formGetRebootTimer stack-based overflow Affected: 15.03.06.42_multi |
| CVE-2026-2191 | 7.2 | Feb 8 | Tenda AC9 formGetDdosDefenceList stack-based overflow Affected: 15.03.06.42_multi |
| CVE-2022-36571 | 7.2 | Aug 31 | Tenda AC9 V15.03.05.19 was discovered to contain a stack overflow via the mask parameter at /goform/WanParameterSetting Affected: 15.03.05.19 |
| CVE-2022-36570 | 7.2 | Aug 31 | Tenda AC9 V15.03.05.19 was discovered to contain a stack overflow via the time parameter at /goform/SetLEDCfg Affected: 15.03.05.19 |
| CVE-2025-5900 | 7.1 | Jun 9 | A vulnerability, which was classified as problematic, was found in Tenda AC9 15.03.02.13 Affected: 15.03.2.13 |
| CVE-2025-29387 | 7.1 | Mar 14 | In Tenda AC9 v1.0 V15.03.05.14_multi, the wanSpeed parameter of /goform/AdvSetMacMtuWan has a stack overflow vulnerability, which can lead to remote arbitrary code execution Affected: 15.03.05.14 |
| CVE-2025-9731 | 7.0 | Aug 31 | A vulnerability was determined in Tenda AC9 15.03.05.19 Affected: 15.03.05.19 |
Showing 34
