ac7_firmware vulnerabilities
CVEs whose affected-version data names the ac7_firmware package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
7 CVEsRSS
CVE-2025-11586High· 8.8A vulnerability was determined in Tenda AC7 15.03.06.44
A vulnerability was determined in Tenda AC7 15.03.06.44. This affects an unknown function of the file /goform/setNotUpgrade. This manipulation of the argument newVersion causes stack-based buffer overflow. The attack is possible to be ca…
CVE-2025-11528High· 8.8A vulnerability was identified in Tenda AC7 15.03.06.44
A vulnerability was identified in Tenda AC7 15.03.06.44. This affects an unknown function of the file /goform/saveAutoQos. The manipulation of the argument enable leads to stack-based buffer overflow. Remote exploitation of the attack is…
CVE-2025-11527High· 8.8A vulnerability was determined in Tenda AC7 15.03.06.44
A vulnerability was determined in Tenda AC7 15.03.06.44. The impacted element is an unknown function of the file /goform/fast_setting_pppoe_set. Executing a manipulation of the argument Password can lead to stack-based buffer overflow. T…
CVE-2025-11526High· 8.8A vulnerability was found in Tenda AC7 15.03.06.44
A vulnerability was found in Tenda AC7 15.03.06.44. The affected element is an unknown function of the file /goform/WifiMacFilterSet. Performing a manipulation of the argument wifi_chkHz results in stack-based buffer overflow. The attack…
CVE-2025-11525High· 8.8A vulnerability has been found in Tenda AC7 15.03.06.44
A vulnerability has been found in Tenda AC7 15.03.06.44. Impacted is an unknown function of the file /goform/SetUpnpCfg. Such manipulation of the argument upnpEn leads to stack-based buffer overflow. The attack can be launched remotely. …
CVE-2025-11524High· 8.8A flaw has been found in Tenda AC7 15.03.06.44
A flaw has been found in Tenda AC7 15.03.06.44. This issue affects some unknown processing of the file /goform/SetDDNSCfg. This manipulation of the argument ddnsEn causes stack-based buffer overflow. The attack can be initiated remotely.…
CVE-2025-11523Medium· 6.3A vulnerability was detected in Tenda AC7 15.03.06.44
A vulnerability was detected in Tenda AC7 15.03.06.44. This vulnerability affects unknown code of the file /goform/AdvSetLanip. The manipulation of the argument lanIp results in command injection. It is possible to launch the attack remo…