Skip to content
OpenAdvisories

Product · Tenda

AC18

33 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 6.3
    CVE-2025-11121

    Tenda AC18 AdvSetLanip command injection

    A security vulnerability has been detected in Tenda AC18 15.03.05.19. The impacted element is an unknown function of the file /goform/AdvSetLanip. The manipulation of the argument lanIp leads to command injection. The attack can be initiated remotely. The exp…

    Tenda AC18
  • Medium 5.6
    CVE-2025-8182

    Tenda AC18 Samba smb.conf weak password

    A vulnerability has been found in Tenda AC18 15.03.05.19 and classified as problematic. This vulnerability affects unknown code of the file /etc_ro/smb.conf of the component Samba. The manipulation leads to weak password requirements. The attack can be initia…

    Tenda AC18
  • Medium 6.3
    CVE-2025-5606

    Tenda AC18 SetIPTVCfg formSetIptv command injection

    A vulnerability was found in Tenda AC18 15.03.05.05. It has been declared as critical. This vulnerability affects the function formSetIptv of the file /goform/SetIPTVCfg. The manipulation of the argument list leads to command injection. The attack can be init…

    Tenda AC18
  • Medium 6.5
    CVE-2024-10280

    Tenda AC6/AC7/AC8/AC9/AC10/AC10U/AC15/AC18/AC500/AC1206 GetIPTV websReadEvent null pointer dereference

    A vulnerability was found in Tenda AC6, AC7, AC8, AC9, AC10, AC10U, AC15, AC18, AC500 and AC1206 up to 20241022. It has been rated as problematic. This issue affects the function websReadEvent of the file /goform/GetIPTV. The manipulation of the argument Cont…

    Tenda AC15 AC18 AC7
  • Medium 6.3
    CVE-2024-2854

    Tenda AC18 setsambacfg formSetSambaConf os command injection

    A vulnerability classified as critical has been found in Tenda AC18 15.03.05.05. Affected is the function formSetSambaConf of the file /goform/setsambacfg. The manipulation of the argument usbName leads to os command injection. It is possible to launch the at…

    Tenda AC18
  • Medium 4.3
    CVE-2024-2560

    Tenda AC18 SysToolRestoreSet fromSysToolRestoreSet cross-site request forgery

    A vulnerability classified as problematic was found in Tenda AC18 15.03.05.05. Affected by this vulnerability is the function fromSysToolRestoreSet of the file /goform/SysToolRestoreSet. The manipulation leads to cross-site request forgery. The attack can be …

    Tenda AC18
  • Medium 4.3
    CVE-2024-2559

    Tenda AC18 SysToolReboot fromSysToolReboot cross-site request forgery

    A vulnerability classified as problematic has been found in Tenda AC18 15.03.05.05. Affected is the function fromSysToolReboot of the file /goform/SysToolReboot. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotel…

    Tenda AC18