ac18_firmware vulnerabilities
CVEs whose affected-version data names the ac18_firmware package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
11 CVEsRSS
CVE-2025-14993High· 8.8A vulnerability was detected in Tenda AC18 15.03.05.05
A vulnerability was detected in Tenda AC18 15.03.05.05. This affects the function sprintf of the file /goform/SetDlnaCfg of the component HTTP Request Handler. The manipulation of the argument scanList results in stack-based buffer overf…
CVE-2025-11328High· 8.8A vulnerability was detected in Tenda AC18 15.03.05.19(6318)
A vulnerability was detected in Tenda AC18 15.03.05.19(6318). This issue affects some unknown processing of the file /goform/SetDDNSCfg. The manipulation of the argument ddnsEn results in stack-based buffer overflow. It is possible to la…
CVE-2025-11327High· 8.8A security vulnerability has been detected in Tenda AC18 15.03.05.19(6318)
A security vulnerability has been detected in Tenda AC18 15.03.05.19(6318). This vulnerability affects unknown code of the file /goform/SetUpnpCfg. The manipulation of the argument upnpEn leads to stack-based buffer overflow. It is possi…
CVE-2025-11326High· 8.8A weakness has been identified in Tenda AC18 15.03.05.19(6318)
A weakness has been identified in Tenda AC18 15.03.05.19(6318). This affects an unknown part of the file /goform/WifiMacFilterSet. Executing a manipulation of the argument wifi_chkHz can lead to stack-based buffer overflow. The attack ma…
CVE-2025-11325High· 8.8A security flaw has been discovered in Tenda AC18 15.03.05.19(6318)
A security flaw has been discovered in Tenda AC18 15.03.05.19(6318). Affected by this issue is some unknown functionality of the file /goform/fast_setting_pppoe_set. Performing a manipulation of the argument Username results in stack-bas…
CVE-2025-11324High· 8.8A vulnerability was identified in Tenda AC18 15.03.05.19(6318)
A vulnerability was identified in Tenda AC18 15.03.05.19(6318). Affected by this vulnerability is an unknown functionality of the file /goform/setNotUpgrade. Such manipulation of the argument newVersion leads to stack-based buffer overfl…
CVE-2025-11123High· 8.8A flaw has been found in Tenda AC18 15.03.05.19
A flaw has been found in Tenda AC18 15.03.05.19. This impacts an unknown function of the file /goform/saveAutoQos. This manipulation of the argument enable causes stack-based buffer overflow. The attack may be initiated remotely. The exp…
CVE-2025-11121Medium· 6.3A security vulnerability has been detected in Tenda AC18 15.03.05.19
A security vulnerability has been detected in Tenda AC18 15.03.05.19. The impacted element is an unknown function of the file /goform/AdvSetLanip. The manipulation of the argument lanIp leads to command injection. The attack can be initi…
CVE-2025-11120High· 8.8A weakness has been identified in Tenda AC8 16.03.34.06
A weakness has been identified in Tenda AC8 16.03.34.06. The affected element is the function formSetServerConfig of the file /goform/SetServerConfig. Executing manipulation can lead to buffer overflow. It is possible to launch the attac…
CVE-2025-11122High· 8.8A vulnerability was detected in Tenda AC18 15.03.05.19
A vulnerability was detected in Tenda AC18 15.03.05.19. This affects an unknown function of the file /goform/WizardHandle. The manipulation of the argument WANT/mtuvalue results in stack-based buffer overflow. The attack can be launched …
CVE-2022-35201Critical· 9.8Tenda-AC18 V15.03.05.05 was discovered to contain a remote command execution (RCE) vulnerability.
Tenda-AC18 V15.03.05.05 was discovered to contain a remote command execution (RCE) vulnerability.