GCVE - cpe:2.3:o:tenda:ac10_firmware:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:tenda:ac10_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

Vendor	Tenda (`cebb1c0a-7ddd-5bf6-9fc6-52b2b4f8dd42`)
Product	Ac10 Firmware (`94e82633-7927-50d3-8a69-db323ba3260b`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-16248`	vulnerable	2026-07-29 00:26:18.630992	Tenda AC10 httpd/netctrl AdvSetLanip fromAdvSetLanip stack-based overflow HIGH (8.8) A vulnerability was found in Tenda AC10 16.03.10.09_multi_TDE01. This issue affects the function fromAdvSetLanip of the file /goform/AdvSetLanip of the component httpd/netctrl. The manipulation of the argument GetValue/SetValue results in stack-based buffer overflow. The attack may be performed from remote. The exploit has been made public and could be used. Published: 2026-07-20T12:45:10.966Z Updated: 2026-07-20T13:50:32.452Z Open on db.gcve.eu Reference links https://vuldb.com/vuln/380539 https://vuldb.com/vuln/380539/cti https://vuldb.com/cve/CVE-2026-16248 https://vuldb.com/submit/858411 https://github.com/teiwiet/tenda-ac10-vulnerabilities/blob/main/advisory-fromAdvSetLanip.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-5550`	vulnerable	2026-06-08 08:07:03.823160	Tenda AC10 httpd fromSysToolChangePwd stack-based overflow HIGH (8.8) A vulnerability was identified in Tenda AC10 16.03.10.10_multi_TDE01. This affects the function fromSysToolChangePwd of the file /bin/httpd. The manipulation leads to stack-based buffer overflow. The attack may be initiated remotely. Multiple endpoints might be affected. Published: 2026-04-05T08:00:20.639Z Updated: 2026-04-07T02:43:36.590Z Open on db.gcve.eu Reference links https://vuldb.com/vuln/355314 https://vuldb.com/vuln/355314/cti https://vuldb.com/submit/782299 https://github.com/somanyerrors/tenda-ac10v4-vulnerabilities/blob/main/findings/HIGH-01-getvalue-229-callers.md https://www.tenda.com.cn/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-5549`	vulnerable	2026-06-08 08:07:03.821187	Tenda AC10 RSA 2048-bit Private Key privkeySrv.pem hard-coded key MEDIUM (5.3) A vulnerability was determined in Tenda AC10 16.03.10.10_multi_TDE01. Affected by this issue is some unknown functionality of the file /webroot_ro/pem/privkeySrv.pem of the component RSA 2048-bit Private Key Handler. Executing a manipulation can lead to use of hard-coded cryptographic key . The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. Published: 2026-04-05T07:45:14.628Z Updated: 2026-04-06T16:21:09.043Z Open on db.gcve.eu Reference links https://vuldb.com/vuln/355313 https://vuldb.com/vuln/355313/cti https://vuldb.com/submit/782298 https://github.com/somanyerrors/tenda-ac10v4-vulnerabilities/blob/main/findings/CRITICAL-05-exposed-rsa-private-key.md https://www.tenda.com.cn/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-5548`	vulnerable	2026-06-08 08:07:03.820591	Tenda AC10 httpd fromSysToolChangePwd stack-based overflow HIGH (8.8) A vulnerability was found in Tenda AC10 16.03.10.10_multi_TDE01. Affected by this vulnerability is the function fromSysToolChangePwd of the file /bin/httpd. Performing a manipulation of the argument sys.userpass results in stack-based buffer overflow. The attack can be initiated remotely. Published: 2026-04-05T07:30:15.665Z Updated: 2026-04-06T17:57:47.036Z Open on db.gcve.eu Reference links https://vuldb.com/vuln/355312 https://vuldb.com/vuln/355312/cti https://vuldb.com/submit/782297 https://github.com/somanyerrors/tenda-ac10v4-vulnerabilities/blob/main/findings/CRITICAL-04-stackoverflow-fromsystoolchangepwd.md https://www.tenda.com.cn/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-5547`	vulnerable	2026-06-08 08:07:03.818225	Tenda AC10 httpd formAddMacfilterRule os command injection MEDIUM (6.3) A vulnerability has been found in Tenda AC10 16.03.10.10_multi_TDE01. Affected is the function formAddMacfilterRule of the file /bin/httpd. Such manipulation leads to os command injection. It is possible to launch the attack remotely. Multiple endpoints might be affected. Published: 2026-04-05T07:15:15.874Z Updated: 2026-04-06T14:51:06.247Z Open on db.gcve.eu Reference links https://vuldb.com/vuln/355311 https://vuldb.com/vuln/355311/cti https://vuldb.com/submit/782296 https://github.com/somanyerrors/tenda-ac10v4-vulnerabilities/blob/main/findings/CRITICAL-03-command-injection-formaddmacfilterrule.md https://www.tenda.com.cn/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-5629`	vulnerable	2026-06-08 07:37:25.351413	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-12622`	vulnerable	2026-06-08 07:04:30.547699	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-32317`	vulnerable	2026-06-08 06:35:33.041420	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-10280`	vulnerable	2026-06-08 06:22:03.906123	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-14559`	vulnerable	2026-06-08 05:10:53.047668	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-14558`	vulnerable	2026-06-08 05:10:53.046972	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-14557`	vulnerable	2026-06-08 05:10:53.045652	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.