What’s Vulnerable › Vulnerabilities

CVE-2025-11326: Tenda AC18 WifiMacFilterSet stack-based overflow

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2025-10-06 · updated 2026-10-09
• Weakness: CWE-119

Description

A weakness has been identified in Tenda AC18 15.03.05.19(6318). This affects an unknown part of the file /goform/WifiMacFilterSet. Executing a manipulation of the argument wifi_chkHz can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks.

Affected products

• Tenda AC18: 15.03.05.19(6318)

References

• https://github.com/noahze01/IoT-vulnerable/blob/main/Tenda/AC18/WifiMacFilterSet.md
• https://vuldb.com/?ctiid.327209
• https://vuldb.com/?id.327209
• https://vuldb.com/?submit.664530
• https://www.tenda.com.cn/

Get alerted when CVE-2025-11326 or the next vulnerability affects your stack