# Tenda AC10.

Every CVE that names Tenda AC10 among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Tenda AC10 httpd R7WebsSecurityHandler improper authentication](https://agentprime.io/advisories/CVE-2026-19924.md)
  `CVE-2026-19924` · CVE record: Tenda AC10 · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Aug 2026 · Tags: Authentication bypass
- [Tenda AC10 httpd/netctrl AdvSetLanip fromAdvSetLanip stack-based overflow](https://agentprime.io/advisories/CVE-2026-16248.md)
  `CVE-2026-16248` · CVE record: Tenda AC10 · CVSS 8.7 High · Not analysed yet · Published 20 Jul 2026 · Tags: Memory corruption
- [Tenda AC10 httpd fromSysToolChangePwd stack-based overflow](https://agentprime.io/advisories/CVE-2026-5550.md)
  `CVE-2026-5550` · CVE record: Tenda AC10 · CVSS 8.7 High · Not analysed yet · Published 5 Apr 2026 · Tags: Memory corruption
- [Tenda AC10 RSA 2048-bit Private Key privkeySrv.pem hard-coded key](https://agentprime.io/advisories/CVE-2026-5549.md)
  `CVE-2026-5549` · CVE record: Tenda AC10 · CVSS 6.9 Medium · Not analysed yet · Published 5 Apr 2026 · Tags: Hard-coded credentials, CWE-320
- [Tenda AC10 httpd fromSysToolChangePwd stack-based overflow](https://agentprime.io/advisories/CVE-2026-5548.md)
  `CVE-2026-5548` · CVE record: Tenda AC10 · CVSS 8.7 High · Not analysed yet · Published 5 Apr 2026 · Tags: Memory corruption
- [Tenda AC10 httpd formAddMacfilterRule os command injection](https://agentprime.io/advisories/CVE-2026-5547.md)
  `CVE-2026-5547` · CVE record: Tenda AC10 · CVSS 5.3 Medium · Not analysed yet · Published 5 Apr 2026 · Tags: Command injection
- [Tenda AC10 SysRunCmd formSysRunCmd buffer overflow](https://agentprime.io/advisories/CVE-2025-12622.md)
  `CVE-2025-12622` · CVE record: Tenda AC10 · CVSS 8.7 High · Not analysed yet · Published 3 Nov 2025 · Tags: Memory corruption
- [Tenda AC10 MD5 Hash shadow hard-coded credentials](https://agentprime.io/advisories/CVE-2025-9309.md)
  `CVE-2025-9309` · CVE record: Tenda AC10 · CVSS 2.0 Low · Not analysed yet · Published 21 Aug 2025 · Tags: Hard-coded credentials
- [Tenda AC10 RequestsProcessLaid heap-based overflow](https://agentprime.io/advisories/CVE-2025-8178.md)
  `CVE-2025-8178` · CVE record: Tenda AC10 · CVSS 8.7 High · Not analysed yet · Published 26 Jul 2025 · Tags: Memory corruption
- [Tenda AC10 HTTP SetPptpServerCfg formSetPPTPServer buffer overflow](https://agentprime.io/advisories/CVE-2025-5629.md)
  `CVE-2025-5629` · CVE record: Tenda AC10 · CVSS 8.7 High · Not analysed yet · Published 5 Jun 2025 · Tags: Memory corruption
- [Tenda AC10 UserCongratulationsExec buffer overflow](https://agentprime.io/advisories/CVE-2025-4896.md)
  `CVE-2025-4896` · CVE record: Tenda AC10 · CVSS 8.7 High · Not analysed yet · Published 18 May 2025 · Tags: Memory corruption
- [Tenda AC10 ShutdownSetAdd stack-based overflow](https://agentprime.io/advisories/CVE-2025-3161.md)
  `CVE-2025-3161` · CVE record: Tenda AC10 · CVSS 8.7 High · Not analysed yet · Published 3 Apr 2025 · Tags: Memory corruption
- [Tenda AC8/AC10/AC18 HTTP Request telnet command injection](https://agentprime.io/advisories/CVE-2025-0528.md)
  `CVE-2025-0528` · CVE record: Tenda AC8 and 2 more · CVSS 8.6 High · Not analysed yet · Published 17 Jan 2025 · Tags: Other injection, Command injection
- [Tenda AC10 SetSysAutoRebbotCfg formSetRebootTimer stack-based overflow](https://agentprime.io/advisories/CVE-2024-11248.md)
  `CVE-2024-11248` · CVE record: Tenda AC10 · CVSS 8.7 High · Not analysed yet · Published 15 Nov 2024 · Tags: Memory corruption
- [Tenda AC10 fast_setting_wifi_set FUN_0044db3c stack-based overflow](https://agentprime.io/advisories/CVE-2024-11061.md)
  `CVE-2024-11061` · CVE record: Tenda AC10 · CVSS 8.7 High · Not analysed yet · Published 11 Nov 2024 · Tags: Memory corruption
- [Tenda AC10 WifiExtraSet FUN_0046AC38 stack-based overflow](https://agentprime.io/advisories/CVE-2024-11056.md)
  `CVE-2024-11056` · CVE record: Tenda AC10 · CVSS 8.7 High · Not analysed yet · Published 10 Nov 2024 · Tags: Memory corruption
- [Tenda AC6/AC7/AC8/AC9/AC10/AC10U/AC15/AC18/AC500/AC1206 GetIPTV websReadEvent null pointer dereference](https://agentprime.io/advisories/CVE-2024-10280.md)
  `CVE-2024-10280` · CVE record: Tenda AC6 and 4 more · CVSS 7.1 High · Not analysed yet · Published 23 Oct 2024 · Tags: Memory corruption
- [Tenda AC10 SetSysTimeCfg fromSetSysTime stack-based overflow](https://agentprime.io/advisories/CVE-2024-2856.md)
  `CVE-2024-2856` · CVE record: Tenda AC10 · CVSS 8.8 High · Not analysed yet · Published 24 Mar 2024 · Tags: Memory corruption
- [Tenda AC10 SetStaticRouteCfg fromSetRouteStatic stack-based overflow](https://agentprime.io/advisories/CVE-2024-2581.md)
  `CVE-2024-2581` · CVE record: Tenda AC10 · CVSS 8.8 High · Not analysed yet · Published 18 Mar 2024 · Tags: Memory corruption

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=tenda-ac10>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/tenda-ac10/>. Everything for agents: <https://agentprime.io/llms.txt>.