What’s Vulnerable › Products
Tenda AC7 vulnerabilities
72 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 27 published in the last 12 months.
Check whether your Tenda AC7 version is affected
Exploited Tenda AC7 vulnerabilities
- CVE-2018-14558 — Tenda AC7, AC9, and AC10 Routers Command Injection Vulnerability
Latest Tenda AC7 vulnerabilities
- CVE-2026-51846 — (CVSS 9.8)
- CVE-2026-51845 — (CVSS 9.8)
- CVE-2026-51844 — (CVSS 9.8)
- CVE-2026-51843 — (CVSS 9.8)
- CVE-2026-4974 — Tenda AC7 POST Request SetSysTimeCfg fromSetSysTime memory corruption (CVSS 8.8)
- CVE-2026-24441 — Tenda AC7 Transmits Admin Credentials Without HTTPS Protection (CVSS 5.9)
- CVE-2026-24434 — Tenda AC7 Web Interface Lacks CSRF Protections for Admin Actions (CVSS 6.5)
- CVE-2026-24427 — Tenda AC7 Exposes Admin Credentials in Configuration Responses (CVSS 5.5)
- CVE-2026-24426 — Tenda AC7 Reflected XSS via Web Interface Output Encoding (CVSS 6.1)
- CVE-2025-11586 — Tenda AC7 setNotUpgrade stack-based overflow (CVSS 9.8)
- CVE-2025-11528 — Tenda AC7 saveAutoQos stack-based overflow (CVSS 8.8)
- CVE-2025-11527 — Tenda AC7 fast_setting_pppoe_set stack-based overflow (CVSS 8.8)
- CVE-2025-11526 — Tenda AC7 WifiMacFilterSet stack-based overflow (CVSS 8.8)
- CVE-2025-11525 — Tenda AC7 SetUpnpCfg stack-based overflow (CVSS 8.8)
- CVE-2025-11524 — Tenda AC7 SetDDNSCfg stack-based overflow (CVSS 8.8)
- CVE-2025-11523 — Tenda AC7 AdvSetLanip command injection (CVSS 8.8)
- CVE-2025-9023 — Tenda AC7/AC18 SetLEDCfg formSetSchedLed buffer overflow (CVSS 8.8)
- CVE-2025-8017 — Tenda AC7 httpd setMacFilterCfg formSetMacFilterCfg stack-based overflow (CVSS 8.8)
- CVE-2025-5862 — Tenda AC7 setPptpUserList formSetPPTPUserList buffer overflow (CVSS 9.8)
- CVE-2025-5861 — Tenda AC7 AdvSetLanip fromadvsetlanip buffer overflow (CVSS 9.8)
- CVE-2025-4810 — Tenda AC7 SetRebootTimer formSetRebootTimer stack-based overflow (CVSS 8.8)
- CVE-2025-4809 — Tenda AC7 setMacFilterCfg fromSafeSetMacFilter stack-based overflow (CVSS 8.8)
- CVE-2025-3346 — Tenda AC7 SetPptpServerCfg formSetPPTPServer buffer overflow (CVSS 8.8)
- CVE-2025-29135 — (CVSS 9.8)
- CVE-2025-29137 — (CVSS 9.8)