Vulnerabilidades do Tenda Ac10u Firmware
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Tenda Ac10u Firmware: 3 registro(s), com versões afetadas e correções.cpe:2.3:o:tenda:ac10u_firmware
CVE-2026-8263
Crítica · 9.8
CWE-787 10/05/2026
Tenda AC6 httpd WifiExtraSet fromSetWirelessRepeat os command injection
A security flaw has been discovered in Tenda AC6 15.03.06.49_multi_TDE01. Affected is the function fromSetWirelessRepeat of the file /goform/WifiExtraSet of the component httpd. Performing a manipulation of the argument mac/ssid results in os command injection. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks.
CVE-2025-15218
Alta · 8.8
CWE-119 30/12/2025
Tenda AC10U POST Request Parameter AdvSetLanip fromadvsetlanip buffer overflow
A weakness has been identified in Tenda AC10U 15.03.06.48/15.03.06.49. Affected by this vulnerability is the function fromadvsetlanip of the file /goform/AdvSetLanip of the component POST Request Parameter Handler. Executing a manipulation of the argument lanMask can lead to buffer overflow. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks.
CVE-2025-15215
Alta · 8.8
CWE-119 30/12/2025
Tenda AC10U HTTP POST Request setPptpUserList formSetPPTPUserList buffer overflow
A vulnerability was determined in Tenda AC10U 15.03.06.48/15.03.06.49. This affects the function formSetPPTPUserList of the file /goform/setPptpUserList of the component HTTP POST Request Handler. This manipulation of the argument list causes buffer overflow. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.