GCVE - cpe:2.3:o:tenda:ac21_firmware:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:tenda:ac21_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

Vendor	Tenda (`cebb1c0a-7ddd-5bf6-9fc6-52b2b4f8dd42`)
Product	Ac21 Firmware (`fae0d253-296d-51e4-9da6-523a8af9cc03`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-4565`	vulnerable	2026-06-08 08:05:13.536416	Tenda AC21 SetNetControlList formSetQosBand buffer overflow HIGH (8.8) A vulnerability was detected in Tenda AC21 16.03.08.16. Impacted is the function formSetQosBand of the file /goform/SetNetControlList. Performing a manipulation of the argument list results in buffer overflow. The attack can be initiated remotely. The exploit is now public and may be used. Published: 2026-03-23T00:34:59.843Z Updated: 2026-03-23T16:39:11.312Z Open on db.gcve.eu Reference links https://vuldb.com/?id.352402 https://vuldb.com/?ctiid.352402 https://vuldb.com/?submit.775119 https://github.com/hellonestor/killallbug/issues/14 https://github.com/hellonestor/killallbug/releases/tag/poc	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-2148`	vulnerable	2026-06-08 07:55:16.616844	Tenda AC21 Web Management DownloadFlash information disclosure MEDIUM (5.3) A security vulnerability has been detected in Tenda AC21 16.03.08.16. Affected is an unknown function of the file /cgi-bin/DownloadFlash of the component Web Management Interface. The manipulation leads to information disclosure. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used. Published: 2026-02-08T10:32:08.524Z Updated: 2026-02-23T09:40:55.973Z Open on db.gcve.eu Reference links https://vuldb.com/?id.344850 https://vuldb.com/?ctiid.344850 https://vuldb.com/?submit.747557 https://github.com/master-abc/cve/issues/27 https://www.tenda.com.cn/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-2147`	vulnerable	2026-06-08 07:55:16.614254	Tenda AC21 Web Management DownloadLog information disclosure MEDIUM (5.3) A weakness has been identified in Tenda AC21 16.03.08.16. This impacts an unknown function of the file /cgi-bin/DownloadLog of the component Web Management Interface. Executing a manipulation can lead to information disclosure. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks. Published: 2026-02-08T10:02:09.088Z Updated: 2026-02-23T09:40:42.795Z Open on db.gcve.eu Reference links https://vuldb.com/?id.344849 https://vuldb.com/?ctiid.344849 https://vuldb.com/?submit.747429 https://github.com/master-abc/cve/issues/30 https://www.tenda.com.cn/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-1638`	vulnerable	2026-06-08 07:49:09.081530	Tenda AC21 mDMZSetCfg command injection MEDIUM (6.3) A security flaw has been discovered in Tenda AC21 1.1.1.1/1.dmzip/16.03.08.16. The impacted element is the function mDMZSetCfg of the file /goform/mDMZSetCfg. The manipulation of the argument dmzIp results in command injection. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks. Published: 2026-01-29T23:32:11.350Z Updated: 2026-02-23T09:08:03.393Z Open on db.gcve.eu Reference links https://vuldb.com/?id.343417 https://vuldb.com/?ctiid.343417 https://vuldb.com/?submit.740871 https://github.com/LX-LX88/cve/issues/26 https://www.tenda.com.cn/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-1637`	vulnerable	2026-06-08 07:49:09.076579	Tenda AC21 AdvSetMacMtuWan fromAdvSetMacMtuWan stack-based overflow HIGH (8.8) A vulnerability was identified in Tenda AC21 16.03.08.16. The affected element is the function fromAdvSetMacMtuWan of the file /goform/AdvSetMacMtuWan. The manipulation leads to stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit is publicly available and might be used. Published: 2026-01-29T22:32:07.685Z Updated: 2026-02-23T09:07:49.829Z Open on db.gcve.eu Reference links https://vuldb.com/?id.343416 https://vuldb.com/?ctiid.343416 https://vuldb.com/?submit.740865 https://github.com/LX-LX88/cve/issues/25 https://www.tenda.com.cn/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-13446`	vulnerable	2026-06-08 07:04:32.213571	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-13445`	vulnerable	2026-06-08 07:04:32.211047	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-12611`	vulnerable	2026-06-08 07:04:30.513711	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-11091`	vulnerable	2026-06-08 07:02:28.034809	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-10838`	vulnerable	2026-06-08 07:02:27.589781	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-24333`	vulnerable	2026-06-08 05:56:05.315318	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.