Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

AC9 — Vulnerabilities & Security Advisories 14

All 14 CVE vulnerabilities found in AC9, with AI-generated Chinese analysis, references, and POCs.

Vendor: Tenda

CVE ID Title CVSS Severity Published
CVE-2026-104611 Tenda AC9 POST Request fast_setting_internet_set stack-based overflow CWE-121 9.1 Critical 2026-10-02
CVE-2026-86300 Tenda AC9 Web Management R7WebsSecurityHandler improper authentication CWE-287 7.3 High 2026-09-07
CVE-2026-6016 Tenda AC9 POST Request WizardHandle decodePwd stack-based overflow CWE-121 8.8 High 2026-04-10
CVE-2026-6015 Tenda AC9 POST Request QuickIndex formQuickIndex stack-based overflow CWE-121 8.8 High 2026-04-10
CVE-2026-2192 Tenda AC9 formGetRebootTimer stack-based overflow CWE-121 7.2 High 2026-02-08
CVE-2026-2191 Tenda AC9 formGetDdosDefenceList stack-based overflow CWE-121 7.2 High 2026-02-08
CVE-2025-14286 Tenda AC9 Configuration File DownloadCfg.jpg information disclosure CWE-200 5.3 Medium 2025-12-09
CVE-2025-10443 Tenda AC9/AC15 exeCommand formexeCommand buffer overflow CWE-120 8.8 High 2025-09-15
CVE-2025-10442 Tenda AC9/AC15 exeCommand formexeCommand os command injection CWE-78 6.3 Medium 2025-09-15
CVE-2025-9731 Tenda AC9 Administrative shadow hard-coded credentials CWE-798 2.5 Low 2025-08-31
CVE-2025-5900 Tenda AC9 cross-site request forgery CWE-352 4.3 Medium 2025-06-09
CVE-2025-5847 Tenda AC9 HTTP POST Request SetRemoteWebCfg formSetSafeWanWebMan stack-based overflow CWE-121 8.8 High 2025-06-08
CVE-2025-5839 Tenda AC9 POST Request AdvSetLanip fromadvsetlanip buffer overflow CWE-120 8.8 High 2025-06-07
CVE-2025-5836 Tenda AC9 POST Request SetIPTVCfg formSetIptv command injection CWE-77 6.3 Medium 2025-06-07

All 14 known CVE vulnerabilities affecting AC9 with full Chinese analysis, references, and POCs where available.