What’s Vulnerable › Products

Tenda AC23 vulnerabilities

27 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 11 published in the last 12 months.

Check whether your Tenda AC23 version is affected

Latest Tenda AC23 vulnerabilities

• CVE-2026-1420 — Tenda AC23 WifiExtraSet buffer overflow (CVSS 9.8)
• CVE-2026-0640 — Tenda AC23 PowerSaveSet sscanf buffer overflow (CVSS 9.8)
• CVE-2025-15217 — Tenda AC23 HTTP POST Request formSetPPTPUserList buffer overflow (CVSS 8.8)
• CVE-2025-15216 — Tenda AC23 SetIpMacBind fromSetIpMacBind stack-based overflow (CVSS 8.8)
• CVE-2025-12596 — Tenda AC23 saveParentControlInfo buffer overflow (CVSS 9.8)
• CVE-2025-12595 — Tenda AC23 SetVirtualServerCfg formSetVirtualSer buffer overflow (CVSS 9.8)
• CVE-2025-11356 — Tenda AC23 SetStaticRouteCfg sscanf buffer overflow (CVSS 8.8)
• CVE-2025-10803 — Tenda AC23 HTTP POST Request SetPptpServerCfg sscanf buffer overflow (CVSS 8.8)
• CVE-2025-9605 — Tenda AC21/AC23 GetParentControlInfo stack-based overflow (CVSS 9.8)
• CVE-2025-8060 — Tenda AC23 httpd setMacFilterCfg sub_46C940 stack-based overflow (CVSS 8.8)
• CVE-2025-3167 — Tenda AC23 API Interface VerAPIMant denial of service (CVSS 7.5)
• CVE-2023-24334 — (CVSS 8.0)
• CVE-2023-40798 — (CVSS 8.8)
• CVE-2023-40797 — (CVSS 8.8)
• CVE-2023-40802 — (CVSS 6.5)
• CVE-2023-40800 — (CVSS 8.8)
• CVE-2023-40799 — (CVSS 9.8)
• CVE-2023-2649 — Tenda AC23 Service Port 7329 ate command injection (CVSS 8.8)
• CVE-2023-0782 — Tenda AC23 httpd formGetSysToolDDNS out-of-bounds write (CVSS 9.8)
• CVE-2022-43108 — (CVSS 9.8)
• CVE-2022-43107 — (CVSS 9.8)
• CVE-2022-43106 — (CVSS 9.8)
• CVE-2022-43105 — (CVSS 9.8)
• CVE-2022-43104 — (CVSS 9.8)
• CVE-2022-43103 — (CVSS 9.8)