What’s Vulnerable › Products

Tenda AC18 vulnerabilities

105 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 35 published in the last 12 months.

Check whether your Tenda AC18 version is affected

Latest Tenda AC18 vulnerabilities

• CVE-2026-82695 — Tenda AC18 Telnet telnet missing authentication (CVSS 10.0)
• CVE-2026-11528 — Tenda AC18 Web Management getRebootStatus sub_45304 stack-based overflow (CVSS 8.8)
• CVE-2026-31255 — (CVSS 9.8)
• CVE-2025-14993 — Tenda AC18 HTTP Request SetDlnaCfg sprintf stack-based overflow (CVSS 8.8)
• CVE-2025-14992 — Tenda AC18 HTTP Request GetParentControlInfo strcpy stack-based overflow (CVSS 8.8)
• CVE-2025-63835 — (CVSS 8.8)
• CVE-2025-63834 — (CVSS 5.4)
• CVE-2025-11328 — Tenda AC18 SetDDNSCfg stack-based overflow (CVSS 8.8)
• CVE-2025-11327 — Tenda AC18 SetUpnpCfg stack-based overflow (CVSS 8.8)
• CVE-2025-11326 — Tenda AC18 WifiMacFilterSet stack-based overflow (CVSS 8.8)
• CVE-2025-11325 — Tenda AC18 fast_setting_pppoe_set stack-based overflow (CVSS 8.8)
• CVE-2025-11324 — Tenda AC18 setNotUpgrade stack-based overflow (CVSS 8.8)
• CVE-2025-60663 — (CVSS 7.5)
• CVE-2025-60661 — (CVSS 5.3)
• CVE-2025-60662 — (CVSS 7.5)
• CVE-2025-60660 — (CVSS 7.5)
• CVE-2025-11123 — Tenda AC18 saveAutoQos stack-based overflow (CVSS 8.8)
• CVE-2025-11122 — Tenda AC18 WizardHandle stack-based overflow (CVSS 8.8)
• CVE-2025-11121 — Tenda AC18 AdvSetLanip command injection (CVSS 8.8)
• CVE-2025-11120 — Tenda AC8 SetServerConfig formSetServerConfig buffer overflow (CVSS 8.8)
• CVE-2025-9023 — Tenda AC7/AC18 SetLEDCfg formSetSchedLed buffer overflow (CVSS 8.8)
• CVE-2025-8182 — Tenda AC18 Samba smb.conf weak password (CVSS 7.4)
• CVE-2025-5609 — Tenda AC18 AdvSetLanip fromadvsetlanip buffer overflow (CVSS 8.8)
• CVE-2025-5608 — Tenda AC18 SetSysAutoRebbotCfg formsetreboottimer buffer overflow (CVSS 8.8)
• CVE-2025-5607 — Tenda AC18 setPptpUserList formSetPPTPUserList buffer overflow (CVSS 8.8)