Ac10 firmware

This hub aggregates every CVE we track for Ac10 firmware, a product in the networking infrastructure space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Ac10 firmware.

• CVE-2026-5550Tenda AC10 httpd fromSysToolChangePwd stack-based overflow8.8Apr 5, 2026
• CVE-2026-5549Tenda AC10 RSA 2048-bit Private Key privkeySrv.pem hard-coded key5.3Apr 5, 2026
• CVE-2026-5548Tenda AC10 httpd fromSysToolChangePwd stack-based overflow8.8Apr 5, 2026
• CVE-2026-5547Tenda AC10 httpd formAddMacfilterRule os command injection6.3Apr 5, 2026
• CVE-2025-67073A Buffer overflow vulnerability in function fromAdvSetMacMtuWan of bin httpd in Tenda AC10V4.0 V16.03.10.20 allows remote attackers to cause denial of service and possibly code execution by sending...9.8Dec 17, 2025
• CVE-2025-67074A Buffer overflow vulnerability in function fromAdvSetMacMtuWan of bin httpd in Tenda AC10V4.0 V16.03.10.20 allows remote attackers to cause denial of service and possibly code execution by sending...6.5Dec 17, 2025
• CVE-2025-12622Tenda AC10 SysRunCmd formSysRunCmd buffer overflow8.8Nov 3, 2025
• CVE-2025-57218Tenda AC10 v4.0 firmware v16.03.10.09_multi_TDE01 was discovered to contain a stack overflow via the security_5g parameter in the function sub_46284C.5.3Aug 28, 2025
• CVE-2025-57217Tenda AC10 v4.0 firmware v16.03.10.09_multi_TDE01 was discovered to contain a stack overflow via the Password parameter in the function R7WebsSecurityHandler.5.3Aug 28, 2025
• CVE-2025-57215Tenda AC10 v4.0 firmware v16.03.10.20 was discovered to contain a stack overflow via the function get_parentControl_list_Info.7.5Aug 28, 2025
• CVE-2025-57220An input validation flaw in the 'ate' service of Tenda AC10 v4.0 firmware v16.03.10.09_multi_TDE01 to escalate privileges to root via a crafted UDP packet.5.3Aug 28, 2025
• CVE-2025-57219Incorrect access control in the endpoint /goform/ate of Tenda AC10 v4.0 firmware v16.03.10.09_multi_TDE01 allows attackers to escalate privileges or access sensitive components via a crafted request.5.3Aug 28, 2025
• CVE-2025-9309Tenda AC10 MD5 Hash shadow hard-coded credentials2.5Aug 21, 2025
• CVE-2025-8178Tenda AC10 RequestsProcessLaid heap-based overflow8.8Jul 26, 2025
• CVE-2025-5629Tenda AC10 HTTP SetPptpServerCfg formSetPPTPServer buffer overflow8.8Jun 5, 2025