GCVE - cpe:2.3:o:tenda:ac9_firmware:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:tenda:ac9_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

Vendor	Tenda (`cebb1c0a-7ddd-5bf6-9fc6-52b2b4f8dd42`)
Product	Ac9 Firmware (`64d7a677-fdf1-5f2a-aab2-91a7c6277c52`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-6016`	vulnerable	2026-06-08 08:07:04.387069	Tenda AC9 POST Request WizardHandle decodePwd stack-based overflow HIGH (8.8) A vulnerability was found in Tenda AC9 15.03.02.13. The affected element is the function decodePwd of the file /goform/WizardHandle of the component POST Request Handler. Performing a manipulation of the argument WANS results in stack-based buffer overflow. The attack can be initiated remotely. The exploit has been made public and could be used. Published: 2026-04-10T05:00:23.163Z Updated: 2026-04-10T13:40:04.879Z Open on db.gcve.eu Reference links https://vuldb.com/vuln/356572 https://vuldb.com/vuln/356572/cti https://vuldb.com/submit/791829 https://lavender-bicycle-a5a.notion.site/Tenda-AC9-WizardHandle-33153a41781f808480f9e3b78ce438e0?source=copy_link https://www.tenda.com.cn/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-6015`	vulnerable	2026-06-08 08:07:04.384350	Tenda AC9 POST Request QuickIndex formQuickIndex stack-based overflow HIGH (8.8) A vulnerability has been found in Tenda AC9 15.03.02.13. Impacted is the function formQuickIndex of the file /goform/QuickIndex of the component POST Request Handler. Such manipulation of the argument PPPOEPassword leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Published: 2026-04-10T04:45:15.605Z Updated: 2026-04-14T14:34:24.148Z Open on db.gcve.eu Reference links https://vuldb.com/vuln/356571 https://vuldb.com/vuln/356571/cti https://vuldb.com/submit/791828 https://lavender-bicycle-a5a.notion.site/Tenda-AC9-QuickIndex-33153a41781f80458940f212f150a4fb?source=copy_link https://www.tenda.com.cn/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-2192`	vulnerable	2026-06-08 07:55:16.697467	Tenda AC9 formGetRebootTimer stack-based overflow HIGH (7.2) A security vulnerability has been detected in Tenda AC9 15.03.06.42_multi. Affected by this vulnerability is the function formGetRebootTimer. Such manipulation of the argument sys.schedulereboot.start_time/sys.schedulereboot.end_time leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. Published: 2026-02-08T23:02:07.463Z Updated: 2026-02-23T09:51:06.600Z Open on db.gcve.eu Reference links https://vuldb.com/?id.344895 https://vuldb.com/?ctiid.344895 https://vuldb.com/?submit.749801 https://github.com/glkfc/IoT-Vulnerability/blob/main/Tenda/tenda4.md https://www.tenda.com.cn/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-2191`	vulnerable	2026-06-08 07:55:16.695102	Tenda AC9 formGetDdosDefenceList stack-based overflow HIGH (7.2) A weakness has been identified in Tenda AC9 15.03.06.42_multi. Affected is the function formGetDdosDefenceList. This manipulation of the argument security.ddos.map causes stack-based buffer overflow. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks. Published: 2026-02-08T22:32:10.488Z Updated: 2026-02-23T09:50:50.691Z Open on db.gcve.eu Reference links https://vuldb.com/?id.344894 https://vuldb.com/?ctiid.344894 https://vuldb.com/?submit.749800 https://github.com/glkfc/IoT-Vulnerability/blob/main/Tenda/tenda3.md https://www.tenda.com.cn/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-14286`	vulnerable	2026-06-08 07:06:34.189072	Tenda AC9 Configuration File DownloadCfg.jpg information disclosure MEDIUM (5.3) A vulnerability was determined in Tenda AC9 15.03.05.14_multi. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/DownloadCfg.jpg of the component Configuration File Handler. This manipulation causes information disclosure. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. Published: 2025-12-09T01:32:07.198Z Updated: 2026-02-24T05:45:24.166Z Open on db.gcve.eu Reference links https://vuldb.com/?id.334874 https://vuldb.com/?ctiid.334874 https://vuldb.com/?submit.702723 https://github.com/Madgeaaaaa/MY_VULN_2/blob/main/Tenda/VULN11.md https://www.tenda.com.cn/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-10280`	vulnerable	2026-06-08 06:22:03.907818	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-14559`	vulnerable	2026-06-08 05:10:53.047536	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-14558`	vulnerable	2026-06-08 05:10:53.046930	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-14557`	vulnerable	2026-06-08 05:10:53.044150	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.