What’s Vulnerable › Products

Tenda AC1206 vulnerabilities

48 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 11 published in the last 12 months.

Check whether your Tenda AC1206 version is affected

Latest Tenda AC1206 vulnerabilities

• CVE-2026-82694 — Tenda AC1206 Web UI ate R7WebsSecurityHandler missing authentication (CVSS 10.0)
• CVE-2026-82693 — Tenda AC1206 Web UI telnet TendaTelnet missing authentication (CVSS 10.0)
• CVE-2026-19789 — Tenda AC1206 httpd web management interface WifiGuestSet set_wl_guest_iplist stack-based overflow (CVSS 8.8)
• CVE-2026-19788 — Tenda AC1206 httpd web management interface SetOnlineDevName set_device_name stack-based overflow (CVSS 8.8)
• CVE-2026-0581 — Tenda AC1206 httpd BehaviorManager formBehaviorManager command injection (CVSS 9.8)
• CVE-2025-10432 — Tenda AC1206 HTTP Request AdvSetMacMtuWa check_param_changed stack-based overflow (CVSS 9.8)
• CVE-2025-9523 — Tenda AC1206 GetParentControlInfo stack-based overflow (CVSS 9.8)
• CVE-2025-7544 — Tenda AC1206 setMacFilterCfg formSetMacFilterCfg stack-based overflow (CVSS 8.8)
• CVE-2025-4299 — Tenda AC1206 openSchedWifi setSchedWifi buffer overflow (CVSS 9.8)
• CVE-2025-4298 — Tenda AC1206 setcfm formSetCfm buffer overflow (CVSS 9.8)
• CVE-2025-3328 — Tenda AC1206 fast_setting_wifi_set form_fast_setting_wifi_set buffer overflow (CVSS 8.8)
• CVE-2024-10434 — Tenda AC1206 ate ate_Tenda_mfg_check_usb3 stack-based overflow (CVSS 9.8)
• CVE-2024-10280 — Tenda AC6/AC7/AC8/AC9/AC10/AC10U/AC15/AC18/AC500/AC1206 GetIPTV websReadEvent null pointer dereference (CVSS 7.5)
• CVE-2024-9793 — Tenda AC1206 ate ate_ifconfig_set command injection (CVSS 9.8)
• CVE-2023-38937 — (CVSS 9.8)
• CVE-2023-38936 — (CVSS 9.8)
• CVE-2023-38935 — (CVSS 9.8)
• CVE-2023-38933 — (CVSS 9.8)
• CVE-2023-38931 — (CVSS 9.8)
• CVE-2023-37717 — (CVSS 9.8)
• CVE-2023-37716 — (CVSS 9.8)
• CVE-2023-37712 — (CVSS 9.8)
• CVE-2023-37711 — (CVSS 9.8)
• CVE-2023-37710 — (CVSS 9.8)
• CVE-2022-42081 — (CVSS 7.5)