Ac15 Firmware
Approved changes feed: RSS · Atom
cpe:2.3:o:tenda:ac15_firmware:*:*:*:*:*:*:*:*
part: o version: * update: *
| Vendor | Tenda (cebb1c0a-7ddd-5bf6-9fc6-52b2b4f8dd42) |
|---|---|
| Product | Ac15 Firmware (105cfbfb-620c-539b-aaae-5b83f9b563c9) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-11493 |
vulnerable | 2026-07-29 00:23:31.269609 |
Tenda AC15 Samba smb.conf weak password
MEDIUM (5)
A weakness has been identified in Tenda AC15 15.03.05.19. The impacted element is an unknown function of the file /etc_ro/smb.conf of the component Samba. Executing a manipulation can lead to weak password requirements. The attack is only possible within the local network. A high complexity level is associated with this attack. The exploitability is regarded as difficult. The exploit has been made available to the public and could be used for attacks.
Published: 2026-06-08T05:45:09.868Z
Updated: 2026-06-08T13:30:41.606Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-5830 |
vulnerable | 2026-06-08 08:07:04.138591 |
Tenda AC15 SysToolChangePwd websGetVar stack-based overflow
HIGH (8.8)
A vulnerability was identified in Tenda AC15 15.03.05.18. This affects the function websGetVar of the file /goform/SysToolChangePwd. Such manipulation of the argument oldPwd/newPwd/cfmPwd leads to stack-based buffer overflow. The attack can be executed remotely. The exploit is publicly available and might be used.
Published: 2026-04-09T01:30:23.216Z
Updated: 2026-04-09T14:54:15.471Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-4975 |
vulnerable | 2026-06-08 08:07:02.735764 |
Tenda AC15 POST Request setcfm formSetCfm memory corruption
HIGH (8.8)
A vulnerability has been found in Tenda AC15 15.03.05.19. This affects the function formSetCfm of the file /goform/setcfm of the component POST Request Handler. The manipulation of the argument funcpara1 leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2026-03-27T19:52:54.501Z
Updated: 2026-03-30T18:58:54.834Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-3400 |
vulnerable | 2026-06-08 08:01:18.564628 |
Tenda AC15 TextEditingConversion stack-based overflow
HIGH (8.8)
A security flaw has been discovered in Tenda AC15 up to 15.13.07.13. Affected by this issue is some unknown functionality of the file /goform/TextEditingConversion. The manipulation of the argument wpapsk_crypto2_4g results in stack-based buffer overflow. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks.
Published: 2026-03-01T23:32:12.937Z
Updated: 2026-03-02T15:44:20.052Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-11389 |
vulnerable | 2026-06-08 07:02:28.687070 |
Tenda AC15 saveAutoQos stack-based overflow
HIGH (8.8)
A security flaw has been discovered in Tenda AC15 15.03.05.18. Affected is an unknown function of the file /goform/saveAutoQos. Performing a manipulation of the argument enable results in stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks.
Published: 2025-10-07T11:32:07.151Z
Updated: 2026-02-24T06:48:28.051Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-11388 |
vulnerable | 2026-06-08 07:02:28.686588 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-11387 |
vulnerable | 2026-06-08 07:02:28.686124 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-11386 |
vulnerable | 2026-06-08 07:02:28.685561 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.