Tenda AC9 vulnerabilities
15 published CVEs name Tenda AC9 among the affected products.
- Published CVEs
- 15
- Last 12 months
- 7
- Critical
- 1
- Known exploited
- 0
Critical 1High 8Medium 5Low 1Not scored 0
CVEs per yearBy the year they were published
- 20241
- 20258
- 20266
Newest CVEs
- CVE-2026-104611
Tenda AC9 POST Request fast_setting_internet_set stack-based overflow
Tenda · AC9
Critical9.4 - CVE-2026-86300
Tenda AC9 Web Management R7WebsSecurityHandler improper authentication
Tenda · AC9
Medium6.9 - CVE-2026-6016
Tenda AC9 POST Request WizardHandle decodePwd stack-based overflow
Tenda · AC9
High8.7 - CVE-2026-6015
Tenda AC9 POST Request QuickIndex formQuickIndex stack-based overflow
Tenda · AC9
High8.7 - CVE-2026-2192
Tenda AC9 formGetRebootTimer stack-based overflow
Tenda · AC9
High8.6 - CVE-2026-2191
Tenda AC9 formGetDdosDefenceList stack-based overflow
Tenda · AC9
High8.6 - CVE-2025-14286
Tenda AC9 Configuration File DownloadCfg.jpg information disclosure
Tenda · AC9
Medium6.9 - CVE-2025-10443
Tenda AC9/AC15 exeCommand formexeCommand buffer overflow
Tenda · AC9
High8.7 - CVE-2025-10442
Tenda AC9/AC15 exeCommand formexeCommand os command injection
Tenda · AC9
Medium5.3 - CVE-2025-9731
Tenda AC9 Administrative shadow hard-coded credentials
Tenda · AC9
Low2.0
Most common weaknesses
- CWE-119 Memory buffer bounds error8
- CWE-121 Stack-based buffer overflow6
- CWE-120 Classic buffer overflow2
- CWE-77 Command injection2
- CWE-200 Exposure of sensitive information1
- CWE-259 1
- CWE-284 Improper access control1
- CWE-287 Improper authentication1
- CWE-352 Cross-site request forgery (CSRF)1
- CWE-476 NULL pointer dereference1