CVE-2025-9731: Tenda AC9 Administrative shadow hard-coded credentials

Severity: high (CVSS 7.0 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-08-31 · updated 2026-10-18
Weakness: CWE-259

Description

A vulnerability was determined in Tenda AC9 15.03.05.19. The impacted element is an unknown function of the file /etc_ro/shadow of the component Administrative Interface. This manipulation causes hard-coded credentials. It is possible to launch the attack on the local host. The attack's complexity is rated as high. The exploitability is regarded as difficult. The exploit has been publicly disclosed and may be utilized.

Affected products

Tenda AC9: 15.03.05.19

References

https://github.com/August829/Yu/blob/main/58ead8e7e08bfb0e4.md
https://vuldb.com/?ctiid.322022
https://vuldb.com/?id.322022
https://vuldb.com/?submit.639748
https://www.tenda.com.cn/
https://github.com/August829/Yu/blob/main/58ead8e7e08bfb0e4.md

Get alerted when CVE-2025-9731 or the next vulnerability affects your stack