Login Request a demo
AC
Product
AC9
by Tenda · last CVE Oct 2, 2026
On CISA KEVExploited in the wild
94
CVEs
1
On KEV
9.8
Max CVSS
1
New 30D
Vulnerabilities94In the news0Timeline
Severity mix
Critical 56High 34Medium 4Low 0
Severity
All severities94Critical56High34Medium4Low0
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add AC9 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-57639
6.5
1%
Sep 23
OS Command injection vulnerability in Tenda AC9 1.0 was discovered to contain a command injection vulnerability via the usb.samba.guest.user parameter in the formSetSambaConf…
Affected: 1.0
CVE-2021-42659
6.5
1%
May 24
There is a buffer overflow vulnerability in the Web server httpd of the router in Tenda router devices such as Tenda AC9 V1.0 V15.03.02.19(6318) and Tenda AC9 V3.0…
Affected: 15.03.05.19(6318); 15.03.06.42_multi
CVE-2017-16936
6.5
1%
Nov 24
Directory Traversal vulnerability in app_data_center on Shenzhen Tenda Ac9 US_AC9V1.0BR_V15.03.05.14_multi_TD01, Ac9 ac9_kf_V15.03.05.19(6318_)_cn, Ac15…
Affected: us_ac9v1.0br_v15.03.05.14_multi_td01; ac9_kf_v15.03.05.19(6318_)_cn
CVE-2025-5836
6.3
3%
Jun 7
Tenda AC9 POST Request SetIPTVCfg formSetIptv command injection
Affected: 15.03.2.13
Showing 4