Tenda AC9 1.0

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:h:tenda:ac9:1.0:*:*:*:*:*:*:*

part: h version: 1.0 update: *

VendorTenda (cebb1c0a-7ddd-5bf6-9fc6-52b2b4f8dd42)
ProductAc9 (b264762c-08d4-5fb0-955a-4e328f939cd8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-6016 not_vulnerable 2026-06-08 08:07:04.387270 Tenda AC9 POST Request WizardHandle decodePwd stack-based overflow
HIGH (8.8)
A vulnerability was found in Tenda AC9 15.03.02.13. The affected element is the function decodePwd of the file /goform/WizardHandle of the component POST Request Handler. Performing a manipulation of the argument WANS results in stack-based buffer overflow. The attack can be initiated remotely. The exploit has been made public and could be used.
Published: 2026-04-10T05:00:23.163Z
Updated: 2026-04-10T13:40:04.879Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-6015 not_vulnerable 2026-06-08 08:07:04.386562 Tenda AC9 POST Request QuickIndex formQuickIndex stack-based overflow
HIGH (8.8)
A vulnerability has been found in Tenda AC9 15.03.02.13. Impacted is the function formQuickIndex of the file /goform/QuickIndex of the component POST Request Handler. Such manipulation of the argument PPPOEPassword leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2026-04-10T04:45:15.605Z
Updated: 2026-04-14T14:34:24.148Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5847 not_vulnerable 2026-06-08 07:37:25.903652 Tenda AC9 HTTP POST Request SetRemoteWebCfg formSetSafeWanWebMan stack-based overflow
HIGH (8.8)
A vulnerability has been found in Tenda AC9 15.03.02.13 and classified as critical. Affected by this vulnerability is the function formSetSafeWanWebMan of the file /goform/SetRemoteWebCfg of the component HTTP POST Request Handler. The manipulation of the argument remoteIp leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-08T13:31:44.996Z
Updated: 2025-06-09T13:54:42.018Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5839 not_vulnerable 2026-06-08 07:37:25.884058 Tenda AC9 POST Request AdvSetLanip fromadvsetlanip buffer overflow
HIGH (8.8)
A vulnerability, which was classified as critical, has been found in Tenda AC9 15.03.02.13. Affected by this issue is the function fromadvsetlanip of the file /goform/AdvSetLanip of the component POST Request Handler. The manipulation of the argument lanMask leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-07T17:31:13.113Z
Updated: 2025-06-09T03:34:50.223Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5836 not_vulnerable 2026-06-08 07:37:25.882519 Tenda AC9 POST Request SetIPTVCfg formSetIptv command injection
MEDIUM (6.3)
A vulnerability was found in Tenda AC9 15.03.02.13. It has been rated as critical. This issue affects the function formSetIptv of the file /goform/SetIPTVCfg of the component POST Request Handler. The manipulation of the argument list leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-07T13:31:06.620Z
Updated: 2025-06-09T15:06:31.883Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-45429 not_vulnerable 2026-06-08 07:25:11.005112 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-45428 not_vulnerable 2026-06-08 07:25:11.004706 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-45427 not_vulnerable 2026-06-08 07:25:11.004128 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-45042 not_vulnerable 2026-06-08 07:25:10.954930 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-29387 not_vulnerable 2026-06-08 07:14:56.425299 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-29386 not_vulnerable 2026-06-08 07:14:56.424884 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-29385 not_vulnerable 2026-06-08 07:14:56.424436 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-29384 not_vulnerable 2026-06-08 07:14:56.424035 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-22949 not_vulnerable 2026-06-08 07:10:55.022351 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-22946 not_vulnerable 2026-06-08 07:10:55.021930 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10443 not_vulnerable 2026-06-08 07:02:26.880270 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10442 not_vulnerable 2026-06-08 07:02:26.878378 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10280 not_vulnerable 2026-06-08 06:22:03.929105 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38823 not_vulnerable 2026-06-08 06:08:18.859435 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-42659 not_vulnerable 2026-06-08 05:35:22.425823 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-26728 not_vulnerable 2026-06-08 05:23:51.466625 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.