GCVE - cpe:2.3:o:tenda:ac9_firmware:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:tenda:ac9_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

Vendor	Tenda (`cebb1c0a-7ddd-5bf6-9fc6-52b2b4f8dd42`)
Product	Ac9 Firmware (`64d7a677-fdf1-5f2a-aab2-91a7c6277c52`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-86300`	vulnerable	2026-09-16 04:32:58.940813	Tenda AC9 Web Management R7WebsSecurityHandler improper authentication HIGH (7.3) A flaw has been found in Tenda AC9 15.03.05.14. This impacts the function R7WebsSecurityHandler of the component Web Management. This manipulation causes improper authentication. The attack may be initiated remotely. The exploit has been published and may be used. Published: 2026-09-07T11:30:09.363Z Updated: 2026-09-08T15:03:32.769Z Open on db.gcve.eu Reference links https://vuldb.com/vuln/399464 https://vuldb.com/vuln/399464/cti https://vuldb.com/cve/CVE-2026-86300 https://vuldb.com/submit/906606 https://vuldb.com/submit/906607	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-6016`	vulnerable	2026-06-08 08:07:04.387069	Tenda AC9 POST Request WizardHandle decodePwd stack-based overflow HIGH (8.8) A vulnerability was found in Tenda AC9 15.03.02.13. The affected element is the function decodePwd of the file /goform/WizardHandle of the component POST Request Handler. Performing a manipulation of the argument WANS results in stack-based buffer overflow. The attack can be initiated remotely. The exploit has been made public and could be used. Published: 2026-04-10T05:00:23.163Z Updated: 2026-04-10T13:40:04.879Z Open on db.gcve.eu Reference links https://vuldb.com/vuln/356572 https://vuldb.com/vuln/356572/cti https://vuldb.com/submit/791829 https://lavender-bicycle-a5a.notion.site/Tenda-AC9-WizardHandle-33153a41781f808480f9e3b78ce438e0?source=copy_link https://www.tenda.com.cn/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-6015`	vulnerable	2026-06-08 08:07:04.384350	Tenda AC9 POST Request QuickIndex formQuickIndex stack-based overflow HIGH (8.8) A vulnerability has been found in Tenda AC9 15.03.02.13. Impacted is the function formQuickIndex of the file /goform/QuickIndex of the component POST Request Handler. Such manipulation of the argument PPPOEPassword leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Published: 2026-04-10T04:45:15.605Z Updated: 2026-04-14T14:34:24.148Z Open on db.gcve.eu Reference links https://vuldb.com/vuln/356571 https://vuldb.com/vuln/356571/cti https://vuldb.com/submit/791828 https://lavender-bicycle-a5a.notion.site/Tenda-AC9-QuickIndex-33153a41781f80458940f212f150a4fb?source=copy_link https://www.tenda.com.cn/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-2192`	vulnerable	2026-06-08 07:55:16.697467	Tenda AC9 formGetRebootTimer stack-based overflow HIGH (7.2) A security vulnerability has been detected in Tenda AC9 15.03.06.42_multi. Affected by this vulnerability is the function formGetRebootTimer. Such manipulation of the argument sys.schedulereboot.start_time/sys.schedulereboot.end_time leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. Published: 2026-02-08T23:02:07.463Z Updated: 2026-02-23T09:51:06.600Z Open on db.gcve.eu Reference links https://vuldb.com/?id.344895 https://vuldb.com/?ctiid.344895 https://vuldb.com/?submit.749801 https://github.com/glkfc/IoT-Vulnerability/blob/main/Tenda/tenda4.md https://www.tenda.com.cn/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-2191`	vulnerable	2026-06-08 07:55:16.695102	Tenda AC9 formGetDdosDefenceList stack-based overflow HIGH (7.2) A weakness has been identified in Tenda AC9 15.03.06.42_multi. Affected is the function formGetDdosDefenceList. This manipulation of the argument security.ddos.map causes stack-based buffer overflow. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks. Published: 2026-02-08T22:32:10.488Z Updated: 2026-02-23T09:50:50.691Z Open on db.gcve.eu Reference links https://vuldb.com/?id.344894 https://vuldb.com/?ctiid.344894 https://vuldb.com/?submit.749800 https://github.com/glkfc/IoT-Vulnerability/blob/main/Tenda/tenda3.md https://www.tenda.com.cn/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-14286`	vulnerable	2026-06-08 07:06:34.189072	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-10280`	vulnerable	2026-06-08 06:22:03.907818	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-14559`	vulnerable	2026-06-08 05:10:53.047536	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-14558`	vulnerable	2026-06-08 05:10:53.046930	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-14557`	vulnerable	2026-06-08 05:10:53.044150	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.