AC
Product
AC9
by Tenda · last CVE Oct 2, 2026
On CISA KEVExploited in the wild
94
CVEs
1
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 56High 34Medium 4Low 0
Watch

Add AC9 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-6016
8.8
1%
Apr 10
Tenda AC9 POST Request WizardHandle decodePwd stack-based overflow
Affected: 15.03.02.13
CVE-2026-6015
8.8
1%
Apr 10
Tenda AC9 POST Request QuickIndex formQuickIndex stack-based overflow
Affected: 15.03.02.13
CVE-2025-10443
8.8
5%
Sep 15
A vulnerability was identified in Tenda AC9 and AC15 15.03.05.14/15.03.05.18
Affected: 15.03.05.14
CVE-2025-10442
8.8
9%
Sep 15
A vulnerability was determined in Tenda AC9 and AC15 15.03.05.14
Affected: 15.03.05.14
CVE-2025-5847
8.8
1%
Jun 8
A vulnerability has been found in Tenda AC9 15.03.02.13 and classified as critical
Affected: 15.03.2.13
CVE-2025-5839
8.8
1%
Jun 7
A vulnerability, which was classified as critical, has been found in Tenda AC9 15.03.02.13
Affected: 15.03.2.13
CVE-2024-25753
8.8
1%
Feb 22
Stack Based Buffer Overflow vulnerability in Tenda AC9 v.3.0 with firmware version v.15.03.06.42_multi allows a remote attacker to execute arbitrary code via the formSetDeviceName…
Affected: 5.03.06.42_multi
CVE-2024-25748
8.8
1%
Feb 22
A Stack Based Buffer Overflow vulnerability in tenda AC9 AC9 v.3.0 with firmware version v.15.03.06.42_multi allows a remote attacker to execute arbitrary code via the…
Affected: 5.03.06.42_multi
CVE-2024-25746
8.8
0%
Feb 22
Stack Based Buffer Overflow vulnerability in Tenda AC9 v.3.0 with firmware version v.15.03.06.42_multi allows a remote attacker to execute arbitrary code via the add_white_node…
Affected: 5.03.06.42_multi
CVE-2022-36569
8.8
1%
Aug 31
Tenda AC9 V15.03.05.19 was discovered to contain a stack overflow via the deviceList parameter at /goform/setMacFilterCfg
Affected: 15.03.05.19
CVE-2022-36568
8.8
1%
Aug 31
Tenda AC9 V15.03.05.19 was discovered to contain a stack overflow via the list parameter at /goform/setPptpUserList
Affected: 15.03.05.19
CVE-2017-16923
8.8
3%
Nov 21
Command Injection vulnerability in app_data_center on Shenzhen Tenda Ac9 US_AC9V1.0BR_V15.03.05.14_multi_TD01, Ac9 ac9_kf_V15.03.05.19(6318_)_cn, Ac15…
Affected: us_ac9v1.0br_v15.03.05.14_multi_td01; ac9_kf_v15.03.05.19(6318_)_cn
CVE-2024-25756
8.0
1%
Feb 22
A Stack Based Buffer Overflow vulnerability in Tenda AC9 v.3.0 with firmware version v.15.03.06.42_multi allows a remote attacker to execute arbitrary code via the…
Affected: 5.03.06.42_multi
CVE-2025-14286
7.5
1%
Dec 9
A vulnerability was determined in Tenda AC9 15.03.05.14_multi
Affected: 15.03.05.14_multi
CVE-2025-57638
7.5
0%
Sep 23
Buffer overflow vulnerability in Tenda AC9 1.0 via the user supplied sys.vendor configuration value
Affected: 1.0
CVE-2024-10280
7.5
1%
Oct 23
A vulnerability was found in Tenda AC6, AC7, AC8, AC9, AC10, AC10U, AC15, AC18, AC500 and AC1206 up to 20241022
Affected: 15.03.2.13; 15.03.05.14; 15.03.05.19(6318); 15.03.06.42
CVE-2018-14559
7.5
1%
Apr 25
An issue was discovered on Tenda AC7 devices with firmware through V15.03.06.44_CN(AC7), AC9 devices with firmware through V15.03.05.19(6318)_CN(AC9), and AC10 devices with…
Affected: through 15.03.05.19\(6318\)_cn
CVE-2018-14557
7.5
1%
Apr 25
An issue was discovered on Tenda AC7 devices with firmware through V15.03.06.44_CN(AC7), AC9 devices with firmware through V15.03.05.19(6318)_CN(AC9), and AC10 devices with…
Affected: through 15.03.05.19\(6318\)_cn
CVE-2018-18732
7.5
1%
Oct 29
An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices
Affected: 15.03.05.19(6318)_cn
CVE-2018-18731
7.5
1%
Oct 29
An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices
Affected: 15.03.05.19(6318)_cn
CVE-2018-18730
7.5
1%
Oct 29
An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices
Affected: 15.03.05.19(6318)_cn
CVE-2018-18727
7.5
1%
Oct 29
An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices
Affected: 15.03.05.19(6318)_cn
CVE-2018-18709
7.5
1%
Oct 29
An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices
Affected: 15.03.05.19(6318)_cn
CVE-2018-18708
7.5
1%
Oct 29
An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices
Affected: 15.03.05.19(6318)_cn
CVE-2018-18707
7.5
1%
Oct 29
An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices
Affected: 15.03.05.19(6318)_cn
CVE-2018-18706
7.5
1%
Oct 29
An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices
Affected: 15.03.05.19(6318)_cn
CVE-2026-86300
7.3
1%
Sep 7
Tenda AC9 Web Management R7WebsSecurityHandler improper authentication
Affected: 15.03.05.14
CVE-2026-2192
7.2
1%
Feb 8
Tenda AC9 formGetRebootTimer stack-based overflow
Affected: 15.03.06.42_multi
CVE-2026-2191
7.2
1%
Feb 8
Tenda AC9 formGetDdosDefenceList stack-based overflow
Affected: 15.03.06.42_multi
CVE-2022-36571
7.2
1%
Aug 31
Tenda AC9 V15.03.05.19 was discovered to contain a stack overflow via the mask parameter at /goform/WanParameterSetting
Affected: 15.03.05.19
CVE-2022-36570
7.2
1%
Aug 31
Tenda AC9 V15.03.05.19 was discovered to contain a stack overflow via the time parameter at /goform/SetLEDCfg
Affected: 15.03.05.19
CVE-2025-5900
7.1
0%
Jun 9
A vulnerability, which was classified as problematic, was found in Tenda AC9 15.03.02.13
Affected: 15.03.2.13
CVE-2025-29387
7.1
1%
Mar 14
In Tenda AC9 v1.0 V15.03.05.14_multi, the wanSpeed parameter of /goform/AdvSetMacMtuWan has a stack overflow vulnerability, which can lead to remote arbitrary code execution
Affected: 15.03.05.14
CVE-2025-9731
7.0
0%
Aug 31
A vulnerability was determined in Tenda AC9 15.03.05.19
Affected: 15.03.05.19
Showing 34