Approved changes feed: RSS · Atom

cpe:2.3:o:tenda:ac23_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorTenda (cebb1c0a-7ddd-5bf6-9fc6-52b2b4f8dd42)
ProductAc23 Firmware (61e45848-bf35-5722-9df3-cdceb2271649)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-1420 vulnerable 2026-06-08 07:49:08.523607 Tenda AC23 WifiExtraSet buffer overflow
HIGH (8.8)
A flaw has been found in Tenda AC23 16.03.07.52. This impacts an unknown function of the file /goform/WifiExtraSet. This manipulation of the argument wpapsk_crypto causes buffer overflow. Remote exploitation of the attack is possible. The exploit has been published and may be used.
Published: 2026-01-26T05:02:07.727Z
Updated: 2026-02-23T08:56:57.929Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-0640 vulnerable 2026-06-08 07:47:12.830641 Tenda AC23 PowerSaveSet sscanf buffer overflow
HIGH (8.8)
A weakness has been identified in Tenda AC23 16.03.07.52. This affects the function sscanf of the file /goform/PowerSaveSet. Executing a manipulation of the argument Time can lead to buffer overflow. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks.
Published: 2026-01-06T15:32:08.760Z
Updated: 2026-02-23T08:21:03.636Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-15217 vulnerable 2026-06-08 07:06:35.894833 Tenda AC23 HTTP POST Request formSetPPTPUserList buffer overflow
HIGH (8.8)
A security flaw has been discovered in Tenda AC23 16.03.07.52. Affected is the function formSetPPTPUserList of the component HTTP POST Request Handler. Performing a manipulation of the argument list results in buffer overflow. The attack can be initiated remotely.
Published: 2025-12-30T03:02:07.501Z
Updated: 2026-02-24T06:13:47.735Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-15216 vulnerable 2026-06-08 07:06:35.892773 Tenda AC23 SetIpMacBind fromSetIpMacBind stack-based overflow
HIGH (8.8)
A vulnerability was identified in Tenda AC23 16.03.07.52. This impacts the function fromSetIpMacBind of the file /goform/SetIpMacBind. Such manipulation of the argument bindnum leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit is publicly available and might be used.
Published: 2025-12-30T02:32:08.203Z
Updated: 2026-02-24T06:13:33.535Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-12596 vulnerable 2026-06-08 07:04:30.485253 Tenda AC23 saveParentControlInfo buffer overflow
HIGH (8.8)
A security vulnerability has been detected in Tenda AC23 16.03.07.52. Affected is the function saveParentControlInfo of the file /goform/saveParentControlInfo. Such manipulation of the argument Time leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used.
Published: 2025-11-02T10:32:06.299Z
Updated: 2026-02-24T06:21:11.086Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-12595 vulnerable 2026-06-08 07:04:30.482293 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11356 vulnerable 2026-06-08 07:02:28.631214 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10803 vulnerable 2026-06-08 07:02:27.542822 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.