Skip to content
OpenAdvisories

Product · Tenda

AC6

18 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 4.7
    CVE-2026-8265

    Tenda AC6 httpd getLogFile get_log_file os command injection

    A security vulnerability has been detected in Tenda AC6 15.03.06.23. Affected by this issue is the function get_log_file of the file /goform/getLogFile of the component httpd. The manipulation of the argument wans.flag leads to os command injection. The attac…

    Tenda AC6
  • Medium 6.3
    CVE-2026-8264

    Tenda AC6 httpd WifiApScan formWifiApScan os command injection

    A weakness has been identified in Tenda AC6 15.03.06.23. Affected by this vulnerability is the function formWifiApScan of the file /goform/WifiApScan of the component httpd. Executing a manipulation of the argument wl2g.public.country/wl5g.public.country can …

    Tenda AC6
  • Medium 4.7
    CVE-2026-8263

    Tenda AC6 httpd WifiExtraSet fromSetWirelessRepeat os command injection

    A security flaw has been discovered in Tenda AC6 15.03.06.49_multi_TDE01. Affected is the function fromSetWirelessRepeat of the file /goform/WifiExtraSet of the component httpd. Performing a manipulation of the argument mac/ssid results in os command injectio…

    Tenda AC6
  • Medium 4.7
    CVE-2026-8259

    Tenda AC6 httpd telnet os command injection

    A vulnerability has been found in Tenda AC6 2.0/15.03.06.23. The affected element is an unknown function of the file /goform/telnet of the component httpd. The manipulation of the argument lan.ip leads to os command injection. Remote exploitation of the attac…

    Tenda AC6
  • Medium 6.3
    CVE-2024-10697 EPSS 26%

    Tenda AC6 API Endpoint WriteFacMac formWriteFacMac command injection

    A vulnerability has been found in Tenda AC6 15.03.05.19 and classified as critical. Affected by this vulnerability is the function formWriteFacMac of the file /goform/WriteFacMac of the component API Endpoint. The manipulation of the argument mac leads to com…

    Tenda AC6
  • Medium 6.5
    CVE-2024-10280

    Tenda AC6/AC7/AC8/AC9/AC10/AC10U/AC15/AC18/AC500/AC1206 GetIPTV websReadEvent null pointer dereference

    A vulnerability was found in Tenda AC6, AC7, AC8, AC9, AC10, AC10U, AC15, AC18, AC500 and AC1206 up to 20241022. It has been rated as problematic. This issue affects the function websReadEvent of the file /goform/GetIPTV. The manipulation of the argument Cont…

    Tenda AC15 AC18 AC7
  • Medium 6.3
    CVE-2023-2923

    Tenda AC6 fromDhcpListClient stack-based overflow

    A vulnerability classified as critical was found in Tenda AC6 US_AC6V1.0BR_V15.03.05.19. Affected by this vulnerability is the function fromDhcpListClient. The manipulation leads to stack-based buffer overflow. The attack can be launched remotely. The exploit…

    Tenda AC6