Tenda AC9

• CVE-2026-104611 Critical 9.1 Tenda AC9 POST Request fast_setting_internet_set stack-based overflow 0.5%
• CVE-2026-86300 High 7.3 Tenda AC9 Web Management R7WebsSecurityHandler improper authentication 0.8%
• CVE-2026-6016 High 8.8 Tenda AC9 POST Request WizardHandle decodePwd stack-based overflow 0.8%
• CVE-2026-6015 High 8.8 Tenda AC9 POST Request QuickIndex formQuickIndex stack-based overflow 0.8%
• CVE-2026-2192 High 7.2 Tenda AC9 formGetRebootTimer stack-based overflow 0.8%
• CVE-2026-2191 High 7.2 Tenda AC9 formGetDdosDefenceList stack-based overflow 0.8%
• CVE-2025-14286 Medium 5.3 Tenda AC9 Configuration File DownloadCfg.jpg information disclosure 0.7%
• CVE-2025-10443 High 8.8 Tenda AC9/AC15 exeCommand formexeCommand buffer overflow 4.6%
• CVE-2025-10442 Medium 6.3 Tenda AC9/AC15 exeCommand formexeCommand os command injection 9.2%
• CVE-2025-9731 Low 2.5 Tenda AC9 Administrative shadow hard-coded credentials 0.2%
• CVE-2025-5900 Medium 4.3 Tenda AC9 cross-site request forgery 0.3%
• CVE-2025-5847 High 8.8 Tenda AC9 HTTP POST Request SetRemoteWebCfg formSetSafeWanWebMan stack-based overflow 1.1%
• CVE-2025-5839 High 8.8 Tenda AC9 POST Request AdvSetLanip fromadvsetlanip buffer overflow 1.1%
• CVE-2025-5836 Medium 6.3 Tenda AC9 POST Request SetIPTVCfg formSetIptv command injection 2.9%
• CVE-2024-10280 Medium 6.5 Tenda AC6/AC7/AC8/AC9/AC10/AC10U/AC15/AC18/AC500/AC1206 GetIPTV websReadEvent null pointer dereference 0.8%