Approved changes feed: RSS · Atom

cpe:2.3:a:tenda:ac6_v5.0:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorTenda (cebb1c0a-7ddd-5bf6-9fc6-52b2b4f8dd42)
ProductAc6 V5.0 (e58a27f1-94c7-50ac-b33a-de4fe765b199)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-32010 vulnerable 2026-06-08 07:18:58.946948 Details available
HIGH (8.1)
A stack-based buffer overflow vulnerability exists in the Cloud API functionality of Tenda AC6 V5.0 V02.03.01.110. A specially crafted HTTP response can lead to arbitrary code execution. An attacker can send an HTTP response to trigger this vulnerability.
Published: 2025-08-20T13:09:04.659Z
Updated: 2025-11-03T18:09:23.075Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-31355 vulnerable 2026-06-08 07:17:02.768915 Details available
HIGH (7.2)
A firmware update vulnerability exists in the Firmware Signature Validation functionality of Tenda AC6 V5.0 V02.03.01.110. A specially crafted malicious file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.
Published: 2025-08-20T13:09:10.028Z
Updated: 2025-11-03T19:53:10.109Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-30256 vulnerable 2026-06-08 07:16:59.338595 Details available
HIGH (8.6)
A denial of service vulnerability exists in the HTTP Header Parsing functionality of Tenda AC6 V5.0 V02.03.01.110. A specially crafted series of HTTP requests can lead to a reboot. An attacker can send multiple network packets to trigger this vulnerability.
Published: 2025-08-20T13:09:06.026Z
Updated: 2025-11-03T18:09:00.836Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-27129 vulnerable 2026-06-08 07:14:54.187582 Details available
CRITICAL (9.8)
An authentication bypass vulnerability exists in the HTTP authentication functionality of Tenda AC6 V5.0 V02.03.01.110. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can send packets to trigger this vulnerability.
Published: 2025-08-20T13:09:07.073Z
Updated: 2025-11-03T18:08:58.875Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24496 vulnerable 2026-06-08 07:12:49.404302 Details available
HIGH (7.5)
An information disclosure vulnerability exists in the /goform/getproductInfo functionality of Tenda AC6 V5.0 V02.03.01.110. Specially crafted network packets can lead to a disclosure of sensitive information. An attacker can send packets to trigger this vulnerability.
Published: 2025-08-20T13:09:08.012Z
Updated: 2025-11-03T18:08:57.911Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24322 vulnerable 2026-06-08 07:12:48.485318 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.