Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2862▼ 326 respecto a la semana anterior
Críticas / altas1389▼ 28 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)293▼ 216 respecto a la semana anterior
139 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Crítica (9.8) | 1.9% | 💥 PoC | Tenda AC9 Firmware | 14/3/2025 | 17/6/2026 | In Tenda AC9 v1.0 V15.03.05.14_multi, the wanMTU parameter of /goform/AdvSetMacMtuWan has a stack overflow vulnerability, which can lead to remote arbitrary code execution. | |
| Analizada | Media (5.9) | 4.2% | — | Tendacn AC9 Firmware | 14/3/2025 | 17/6/2026 | Tenda AC9 v15.03.05.19(6318) was discovered to contain a buffer overflow via the formWifiWpsOOB function. | |
| Analizada | Crítica (9.8) | 1.9% | — | Tenda AC9 Firmware | 10/1/2025 | 17/6/2026 | Tenda ac9 v1.0 firmware v15.03.05.19 is vulnerable to command injection in /goform/SetSambaCfg, which may lead to remote arbitrary code execution. | |
| Analizada | Crítica (9.8) | 0.90% | — | Tenda AC9 Firmware | 10/1/2025 | 17/6/2026 | Tenda ac9 v1.0 firmware v15.03.05.19 contains a stack overflow vulnerability in /goform/SetOnlineDevName, which may lead to remote arbitrary code execution. | |
| Analizada | Alta (7.1) | 0.80% | — | Tenda Ac15 FirmwareTenda AC7 FirmwareTenda Ac10u FirmwareTenda Ac500 Firmware+6 | 23/10/2024 | 17/6/2026 | A vulnerability was found in Tenda AC6, AC7, AC8, AC9, AC10, AC10U, AC15, AC18, AC500 and AC1206 up to 20241022. It has been rated as problematic. This issue affects the function websReadEvent of the file /goform/GetIPTV. The manipulation of the argument Content-Length leads to null pointer dereference. The attack may… | |
| Analizada | Crítica (9.8) | 2.2% | — | Tenda AC9 Firmware | 16/8/2024 | 17/6/2026 | A Command Injection vulnerability exists in formWriteFacMac of the httpd binary in Tenda AC9 v15.03.06.42. As a result, attacker can execute OS commands with root privileges. | |
| Analizada | Crítica (9.8) | 0.98% | — | Tenda AC9 Firmware | 26/2/2024 | 17/6/2026 | A Stack Based Buffer Overflow vulnerability in Tenda AC9 v.3.0 with firmware version v.15.03.06.42_multi allows a remote attacker to execute arbitrary code via the fromSetSysTime function. | |
| Analizada | Alta (8) | 0.57% | — | Tenda AC9 Firmware | 22/2/2024 | 17/6/2026 | A Stack Based Buffer Overflow vulnerability in Tenda AC9 v.3.0 with firmware version v.15.03.06.42_multi allows a remote attacker to execute arbitrary code via the formWifiBasicSet function. | |
| Analizada | Alta (8.8) | 0.62% | — | Tenda AC9 Firmware | 22/2/2024 | 17/6/2026 | Stack Based Buffer Overflow vulnerability in Tenda AC9 v.3.0 with firmware version v.15.03.06.42_multi allows a remote attacker to execute arbitrary code via the formSetDeviceName function. | |
| Analizada | Alta (8.8) | 0.59% | — | Tenda AC9 Firmware | 22/2/2024 | 17/6/2026 | A Stack Based Buffer Overflow vulnerability in tenda AC9 AC9 v.3.0 with firmware version v.15.03.06.42_multi allows a remote attacker to execute arbitrary code via the fromSetIpMacBind function. | |
| Analizada | Alta (8.8) | 0.39% | — | Tenda AC9 Firmware | 22/2/2024 | 17/6/2026 | Stack Based Buffer Overflow vulnerability in Tenda AC9 v.3.0 with firmware version v.15.03.06.42_multi allows a remote attacker to execute arbitrary code via the add_white_node function. | |
| Modificada | Crítica (9.8) | 1.0% | — | Tenda AC9 Firmware | 5/2/2024 | 17/6/2026 | Buffer Overflow vulnerability in the function setSchedWifi in Tenda AC9 v.3.0, firmware version v.15.03.06.42_multi allows a remote attacker to cause a denial of service or run arbitrary code via crafted overflow data. | |
| Modificada | Crítica (9.8) | 1.2% | — | Tenda AC6 FirmwareTenda AC9 FirmwareTenda Ac19 FirmwareTenda Ac18 Firmware | 20/11/2023 | 17/6/2026 | Buffer Overflow vulnerability in Tenda Ac19 v.1.0, AC18, AC9 v.1.0, AC6 v.2.0 and v.1.0 allows a remote attacker to execute arbitrary code via the formSetCfm function in bin/httpd. | |
| Modificada | Crítica (9.8) | 0.84% | — | Tendacn AC9 Firmware | 7/9/2023 | 17/6/2026 | Tenda AC9 V3.0BR_V15.03.06.42_multi_TD01 was discovered stack overflow via parameter 'firewall_value' at url /goform/SetFirewallCfg. | |
| Modificada | Crítica (9.8) | 0.84% | — | Tenda AC9 FirmwareTenda AC5 Firmware | 30/8/2023 | 17/6/2026 | Tenda AC9 V3.0 V15.03.06.42_multi and Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 were discovered to contain a stack overflow via parameter mac at url /goform/GetParentControlInfo. | |
| Modificada | Crítica (9.8) | 0.84% | — | Tenda AC9 FirmwareTenda AC7 FirmwareTenda AC5 Firmware | 30/8/2023 | 17/6/2026 | Tenda AC7 V1.0 V15.03.06.44, Tenda AC9 V3.0 V15.03.06.42_multi, and Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 were discovered to contain a stack overflow via parameter time at url /goform/PowerSaveSet. | |
| Modificada | Crítica (9.8) | 0.84% | — | Tenda AC9 FirmwareTenda AC5 Firmware | 30/8/2023 | 17/6/2026 | Tenda AC9 V3.0 V15.03.06.42_multi and Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 were discovered to contain a stack overflow via parameter startIp and endIp at url /goform/SetPptpServerCfg. | |
| Modificada | Crítica (9.8) | 0.85% | — | Tenda AC9 Firmware | 30/8/2023 | 17/6/2026 | Tenda AC9 V3.0 V15.03.06.42_multi was discovered to contain a stack overflow via parameter firewallEn at url /goform/SetFirewallCfg. | |
| Modificada | Crítica (9.8) | 0.84% | — | Tenda AC9 FirmwareTenda AC7 FirmwareTenda AC5 Firmware | 30/8/2023 | 17/6/2026 | Tenda AC7 V1.0 V15.03.06.44, Tenda AC9 V3.0 V15.03.06.42_multi, and Tenda AC5 V1.0RTL_V15.03.06.28 were discovered to contain a stack overflow via parameter page at url /goform/NatStaticSetting. | |
| Modificada | Crítica (9.8) | 1.1% | — | Tenda AC9 FirmwareTenda AC7 FirmwareTenda AC5 Firmware | 30/8/2023 | 17/6/2026 | Tenda AC7 V1.0 V15.03.06.44, Tenda AC9 V3.0 V15.03.06.42_multi, and Tenda AC5 V1.0RTL_V15.03.06.28 were discovered to contain a stack overflow via parameter list at url /goform/SetIpMacBind. | |
| Modificada | Crítica (9.8) | 0.84% | — | Tenda AC9 Firmware | 30/8/2023 | 17/6/2026 | Tenda AC9 V3.0 V15.03.06.42_multi was discovered to contain a stack overflow via parameter wpapsk_crypto at url /goform/WifiExtraSet. | |
| Modificada | Crítica (9.8) | 0.84% | — | Tenda AC9 FirmwareTenda AC5 Firmware | 30/8/2023 | 17/6/2026 | Tenda AC9 V3.0 V15.03.06.42_multi and Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 were discovered to contain a stack overflow via parameter list at url /goform/SetStaticRouteCfg. | |
| Modificada | Crítica (9.8) | 0.84% | — | Tenda AC9 FirmwareTenda AC7 Firmware | 30/8/2023 | 17/6/2026 | Tenda AC7 V1.0 V15.03.06.44 and Tenda AC9 V3.0 V15.03.06.42_multi were discovered to contain a stack overflow via parameter ssid at url /goform/fast_setting_wifi_set. | |
| Modificada | Crítica (9.8) | 0.84% | — | Tenda Ac10 FirmwareTenda Ac1206 FirmwareTenda AC8 FirmwareTenda AC6 Firmware+3 | 7/8/2023 | 17/6/2026 | Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC8 v4 V16.03.34.06, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, AC5 V1.0 V15.03.06.28, AC9 V3.0 V15.03.06.42_multi and AC10 v4.0 V16.03.10.13 were discovered to contain a stack overflow via the list parameter in the formSetVirtualSer function. | |
| Modificada | Crítica (9.8) | 0.85% | — | Tenda Ac10 FirmwareTenda Ac1206 FirmwareTenda AC6 FirmwareTenda AC7 Firmware+5 | 7/8/2023 | 17/6/2026 | Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, AC5 V1.0 V15.03.06.28, FH1203 V2.0.1.6, AC9 V3.0 V15.03.06.42_multi and FH1205 V2.0.0.7(775) were discovered to contain a stack overflow via the speed_dir parameter in the formSetSpeedWan function. |