What’s Vulnerable › Products

Tenda AC10 vulnerabilities

94 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 30 published in the last 12 months.

Check whether your Tenda AC10 version is affected

Exploited Tenda AC10 vulnerabilities

• CVE-2018-14558 — Tenda AC7, AC9, and AC10 Routers Command Injection Vulnerability

Latest Tenda AC10 vulnerabilities

• CVE-2026-19924 — Tenda AC10 httpd R7WebsSecurityHandler improper authentication (CVSS 9.8)
• CVE-2026-16248 — Tenda AC10 httpd/netctrl AdvSetLanip fromAdvSetLanip stack-based overflow (CVSS 8.8)
• CVE-2026-5550 — Tenda AC10 httpd fromSysToolChangePwd stack-based overflow (CVSS 8.8)
• CVE-2026-5549 — Tenda AC10 RSA 2048-bit Private Key privkeySrv.pem hard-coded key (CVSS 7.5)
• CVE-2026-5548 — Tenda AC10 httpd fromSysToolChangePwd stack-based overflow (CVSS 8.8)
• CVE-2026-5547 — Tenda AC10 httpd formAddMacfilterRule os command injection (CVSS 8.8)
• CVE-2025-67074 — (CVSS 6.5)
• CVE-2025-67073 — (CVSS 9.8)
• CVE-2025-12622 — Tenda AC10 SysRunCmd formSysRunCmd buffer overflow (CVSS 9.8)
• CVE-2025-57220 — (CVSS 5.3)
• CVE-2025-57219 — (CVSS 5.3)
• CVE-2025-57215 — (CVSS 7.5)
• CVE-2025-57218 — (CVSS 5.3)
• CVE-2025-57217 — (CVSS 5.3)
• CVE-2025-9309 — Tenda AC10 MD5 Hash shadow hard-coded credentials (CVSS 7.0)
• CVE-2025-8178 — Tenda AC10 RequestsProcessLaid heap-based overflow (CVSS 8.8)
• CVE-2025-5629 — Tenda AC10 HTTP SetPptpServerCfg formSetPPTPServer buffer overflow (CVSS 9.8)
• CVE-2025-4896 — Tenda AC10 UserCongratulationsExec buffer overflow (CVSS 7.5)
• CVE-2025-44175 — (CVSS 5.4)
• CVE-2025-45779 — (CVSS 9.8)
• CVE-2025-25455 — (CVSS 7.5)
• CVE-2025-25454 — (CVSS 7.5)
• CVE-2025-25457 — (CVSS 7.5)
• CVE-2025-25458 — (CVSS 4.6)
• CVE-2025-25453 — (CVSS 4.6)