Login Request a demo
AC
Product
AC10
by Tenda · last CVE Aug 16, 2026
On CISA KEVExploited in the wild
94
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities94In the news0Timeline
Severity mix
Critical 48High 32Medium 14Low 0
Severity
All severities94Critical48High32Medium14Low0
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add AC10 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-5548
8.8
1%
Apr 5
Tenda AC10 httpd fromSysToolChangePwd stack-based overflow
Affected: 16.03.10.10_multi_TDE01
CVE-2026-5547
8.8
2%
Apr 5
Tenda AC10 httpd formAddMacfilterRule os command injection
Affected: 16.03.10.10_multi_TDE01
CVE-2025-8178
8.8
1%
Jul 26
Tenda AC10 RequestsProcessLaid heap-based overflow
Affected: 16.03.10.13
CVE-2025-3161
8.8
1%
Apr 3
Tenda AC10 ShutdownSetAdd stack-based overflow
Affected: 16.03.10.13
CVE-2024-11248
8.8
1%
Nov 15
Tenda AC10 SetSysAutoRebbotCfg formSetRebootTimer stack-based overflow
Affected: 16.03.10.13
CVE-2024-11061
8.8
1%
Nov 11
Tenda AC10 fast_setting_wifi_set FUN_0044db3c stack-based overflow
Affected: 16.03.10.13
CVE-2024-11056
8.8
1%
Nov 10
Tenda AC10 WifiExtraSet FUN_0046AC38 stack-based overflow
Affected: 16.03.10.13
CVE-2024-2581
8.8
1%
Mar 18
Tenda AC10 SetStaticRouteCfg fromSetRouteStatic stack-based overflow
Affected: 16.03.10.13
CVE-2026-5549
7.5
0%
Apr 5
Tenda AC10 RSA 2048-bit Private Key privkeySrv.pem hard-coded key
Affected: 16.03.10.10_multi_TDE01
CVE-2025-57215
7.5
0%
Aug 28
Tenda AC10 v4.0 firmware v16.03.10.20 was discovered to contain a stack overflow via the function get_parentControl_list_Info
Affected: 16.03.10.20
CVE-2025-4896
7.5
1%
May 18
Tenda AC10 UserCongratulationsExec buffer overflow
Affected: 16.03.10.13
CVE-2025-25457
7.5
1%
Apr 17
Tenda AC10 V4.0si_V16.03.10.20 is vulnerable to Buffer Overflow in AdvSetMacMtuWan via cloneType2
Affected: 16.03.10.20
CVE-2025-25455
7.5
1%
Apr 17
Tenda AC10 V4.0si_V16.03.10.20 is vulnerable to Buffer Overflow in AdvSetMacMtuWan via wanMTU2
Affected: 16.03.10.20
CVE-2025-25454
7.5
1%
Apr 17
Tenda AC10 V4.0si_V16.03.10.20 is vulnerable to Buffer Overflow in AdvSetMacMtuWan via wanSpeed2
Affected: 16.03.10.20
CVE-2024-10280
7.5
1%
Oct 23
Tenda AC6/AC7/AC8/AC9/AC10/AC10U/AC15/AC18/AC500/AC1206 GetIPTV websReadEvent null pointer dereference
Affected: 16.03.10.13; 16.03.10.20; 16.03.48.19; 16.03.48.23
CVE-2024-33365
7.5
1%
Jul 29
Buffer Overflow vulnerability in Tenda AC10 v4 US_AC10V4.0si_V16.03.10.20_cn allows a remote attacker to execute arbitrary code via the Virtual_Data_Check function in the…
Affected: 16.03.10.20
CVE-2024-32317
7.5
0%
Apr 17
Tenda AC10 v4.0 V16.03.10.13 and V16.03.10.20 firmware has a stack overflow vulnerability via the adslPwd parameter in the formWanParameterSetting function
Affected: 16.03.10.13; 16.03.10.20
CVE-2022-46109
7.5
1%
Dec 16
Tenda AC15 V15.03.06.23 is vulnerable to Buffer Overflow via function formSetClientState
Affected: 15.03.06.23
CVE-2018-14559
7.5
1%
Apr 25
An issue was discovered on Tenda AC7 devices with firmware through V15.03.06.44_CN(AC7), AC9 devices with firmware through V15.03.05.19(6318)_CN(AC9), and AC10 devices with…
Affected: through 15.03.06.23_cn
CVE-2018-14557
7.5
1%
Apr 25
An issue was discovered on Tenda AC7 devices with firmware through V15.03.06.44_CN(AC7), AC9 devices with firmware through V15.03.05.19(6318)_CN(AC9), and AC10 devices with…
Affected: through 15.03.06.23_cn
CVE-2018-18731
7.5
1%
Oct 28
An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices
Affected: 15.03.06.23_cn
CVE-2018-18732
7.5
1%
Oct 28
An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices
Affected: 15.03.06.23_cn
CVE-2018-18727
7.5
1%
Oct 28
An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices
Affected: 15.03.06.23_cn
CVE-2018-18730
7.5
1%
Oct 28
An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices
Affected: 15.03.06.23_cn
CVE-2018-18706
7.5
1%
Oct 27
An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices
Affected: 15.03.06.23_cn
CVE-2018-18708
7.5
1%
Oct 27
An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices
Affected: 15.03.06.23_cn
CVE-2018-18709
7.5
1%
Oct 27
An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices
Affected: 15.03.06.23_cn
CVE-2018-18707
7.5
1%
Oct 27
An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices
Affected: 15.03.06.23_cn
CVE-2025-0528
7.2
6%
Jan 17
Tenda AC8/AC10/AC18 HTTP Request telnet command injection
Affected: 16.03.10.20
CVE-2025-9309
7.0
0%
Aug 21
Tenda AC10 MD5 Hash shadow hard-coded credentials
Affected: 16.03.10.13
CVE-2023-34568
6.7
0%
Jun 8
Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter time at /goform/PowerSaveSet
Affected: us_ac10v4.0si_v16.03.10.13_cn
CVE-2023-34567
6.7
0%
Jun 8
Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter list at /goform/SetVirtualServerCfg
Affected: us_ac10v4.0si_v16.03.10.13_cn
CVE-2023-34569
6.7
0%
Jun 8
Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter list at /goform/SetNetControlList
Affected: us_ac10v4.0si_v16.03.10.13_cn
CVE-2023-34570
6.7
0%
Jun 8
Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter devName at /goform/SetOnlineDevName
Affected: us_ac10v4.0si_v16.03.10.13_cn
CVE-2023-34571
6.7
0%
Jun 8
Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter shareSpeed at /goform/WifiGuestSet
Affected: us_ac10v4.0si_v16.03.10.13_cn
CVE-2025-67074
6.5
0%
Dec 17
A Buffer overflow vulnerability in function fromAdvSetMacMtuWan of bin httpd in Tenda AC10V4.0 V16.03.10.20 allows remote attackers to cause denial of service and possibly code…
Affected: 16.03.10.20
CVE-2025-44175
5.4
0%
May 12
Tenda AC10 v4 V16.03.10.13 is vulnerable to Buffer Overflow in the GetParentControlInfo function
Affected: 16.03.10.13
CVE-2025-57220
5.3
1%
Aug 28
An input validation flaw in the 'ate' service of Tenda AC10 v4.0 firmware v16.03.10.09_multi_TDE01 to escalate privileges to root via a crafted UDP packet
Affected: 16.03.10.09_multi_tde01
CVE-2025-57217
5.3
1%
Aug 28
Tenda AC10 v4.0 firmware v16.03.10.09_multi_TDE01 was discovered to contain a stack overflow via the Password parameter in the function R7WebsSecurityHandler
Affected: 16.03.10.09_multi_tde01
CVE-2025-57218
5.3
1%
Aug 28
Tenda AC10 v4.0 firmware v16.03.10.09_multi_TDE01 was discovered to contain a stack overflow via the security_5g parameter in the function sub_46284C
Affected: 16.03.10.09_multi_tde01
CVE-2025-57219
5.3
0%
Aug 28
Incorrect access control in the endpoint /goform/ate of Tenda AC10 v4.0 firmware v16.03.10.09_multi_TDE01 allows attackers to escalate privileges or access sensitive components…
Affected: 16.03.10.09_multi_tde01
CVE-2025-25453
4.6
0%
Apr 15
Tenda AC10 V4.0si_V16.03.10.20 is vulnerable to Buffer Overflow in AdvSetMacMtuWan via serviceName2
Affected: 16.03.10.20
CVE-2025-25458
4.6
0%
Apr 15
Tenda AC10 V4.0si_V16.03.10.20 is vulnerable to Buffer Overflow in AdvSetMacMtuWan via serverName2
Affected: 16.03.10.20
CVE-2024-25373
4.6
0%
Feb 15
Tenda AC10V4.0 V16.03.10.20 was discovered to contain a stack overflow via the page parameter in the sub_49B384 function
Affected: 16.03.10.20
Page 2 of 2 · 94 total
12