Ac18 Firmware
Approved changes feed: RSS · Atom
cpe:2.3:o:tenda:ac18_firmware:*:*:*:*:*:*:*:*
part: o version: * update: *
| Vendor | Tenda (cebb1c0a-7ddd-5bf6-9fc6-52b2b4f8dd42) |
|---|---|
| Product | Ac18 Firmware (c033e423-55fc-5f65-8a57-945e177d23ab) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-11528 |
vulnerable | 2026-07-29 00:23:31.361908 |
Tenda AC18 Web Management getRebootStatus sub_45304 stack-based overflow
HIGH (8.8)
A vulnerability was found in Tenda AC18 15.03.05.05. The affected element is the function sub_45304 of the file /goform/getRebootStatus of the component Web Management Interface. The manipulation of the argument callback results in stack-based buffer overflow. The attack may be launched remotely. The exploit has been made public and could be used.
Published: 2026-06-08T15:15:12.614Z
Updated: 2026-06-09T14:35:55.593Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-14993 |
vulnerable | 2026-06-08 07:06:35.496810 |
Tenda AC18 HTTP Request SetDlnaCfg sprintf stack-based overflow
HIGH (8.8)
A vulnerability was detected in Tenda AC18 15.03.05.05. This affects the function sprintf of the file /goform/SetDlnaCfg of the component HTTP Request Handler. The manipulation of the argument scanList results in stack-based buffer overflow. The attack can be executed remotely. The exploit is now public and may be used.
Published: 2025-12-21T04:32:06.259Z
Updated: 2026-02-24T06:00:07.404Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-14992 |
vulnerable | 2026-06-08 07:06:35.494161 |
Tenda AC18 HTTP Request GetParentControlInfo strcpy stack-based overflow
HIGH (8.8)
A security vulnerability has been detected in Tenda AC18 15.03.05.05. The impacted element is the function strcpy of the file /goform/GetParentControlInfo of the component HTTP Request Handler. The manipulation of the argument mac leads to stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used.
Published: 2025-12-21T04:02:07.535Z
Updated: 2026-02-24T05:59:49.072Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-11328 |
vulnerable | 2026-06-08 07:02:28.591226 |
Tenda AC18 SetDDNSCfg stack-based overflow
HIGH (8.8)
A vulnerability was detected in Tenda AC18 15.03.05.19(6318). This issue affects some unknown processing of the file /goform/SetDDNSCfg. The manipulation of the argument ddnsEn results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit is now public and may be used.
Published: 2025-10-06T08:32:07.978Z
Updated: 2026-02-24T06:45:08.457Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-11327 |
vulnerable | 2026-06-08 07:02:28.590663 |
Tenda AC18 SetUpnpCfg stack-based overflow
HIGH (8.8)
A security vulnerability has been detected in Tenda AC18 15.03.05.19(6318). This vulnerability affects unknown code of the file /goform/SetUpnpCfg. The manipulation of the argument upnpEn leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used.
Published: 2025-10-06T08:02:06.994Z
Updated: 2026-02-24T06:44:54.763Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-11326 |
vulnerable | 2026-06-08 07:02:28.590268 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-11325 |
vulnerable | 2026-06-08 07:02:28.589886 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-11324 |
vulnerable | 2026-06-08 07:02:28.588128 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-30891 |
vulnerable | 2026-06-08 06:35:30.721736 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.