# Tenda AC18.

Every CVE that names Tenda AC18 among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Tenda AC18 Telnet telnet missing authentication](https://agentprime.io/advisories/CVE-2026-82695.md)
  `CVE-2026-82695` · CVE record: Tenda AC18 · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Aug 2026 · Tags: Authentication bypass
- [Tenda AC18 Web Management getRebootStatus sub_45304 stack-based overflow](https://agentprime.io/advisories/CVE-2026-11528.md)
  `CVE-2026-11528` · CVE record: Tenda AC18 · CVSS 8.7 High · Not analysed yet · Published 8 Jun 2026 · Tags: Memory corruption
- [Tenda AC18 HTTP Request SetDlnaCfg sprintf stack-based overflow](https://agentprime.io/advisories/CVE-2025-14993.md)
  `CVE-2025-14993` · CVE record: Tenda AC18 · CVSS 8.7 High · Not analysed yet · Published 21 Dec 2025 · Tags: Memory corruption
- [Tenda AC18 HTTP Request GetParentControlInfo strcpy stack-based overflow](https://agentprime.io/advisories/CVE-2025-14992.md)
  `CVE-2025-14992` · CVE record: Tenda AC18 · CVSS 8.7 High · Not analysed yet · Published 21 Dec 2025 · Tags: Memory corruption
- [Tenda AC18 SetDDNSCfg stack-based overflow](https://agentprime.io/advisories/CVE-2025-11328.md)
  `CVE-2025-11328` · CVE record: Tenda AC18 · CVSS 8.7 High · Not analysed yet · Published 6 Oct 2025 · Tags: Memory corruption
- [Tenda AC18 SetUpnpCfg stack-based overflow](https://agentprime.io/advisories/CVE-2025-11327.md)
  `CVE-2025-11327` · CVE record: Tenda AC18 · CVSS 8.7 High · Not analysed yet · Published 6 Oct 2025 · Tags: Memory corruption
- [Tenda AC18 WifiMacFilterSet stack-based overflow](https://agentprime.io/advisories/CVE-2025-11326.md)
  `CVE-2025-11326` · CVE record: Tenda AC18 · CVSS 8.7 High · Not analysed yet · Published 6 Oct 2025 · Tags: Memory corruption
- [Tenda AC18 fast_setting_pppoe_set stack-based overflow](https://agentprime.io/advisories/CVE-2025-11325.md)
  `CVE-2025-11325` · CVE record: Tenda AC18 · CVSS 8.7 High · Not analysed yet · Published 6 Oct 2025 · Tags: Memory corruption
- [Tenda AC18 setNotUpgrade stack-based overflow](https://agentprime.io/advisories/CVE-2025-11324.md)
  `CVE-2025-11324` · CVE record: Tenda AC18 · CVSS 8.7 High · Not analysed yet · Published 6 Oct 2025 · Tags: Memory corruption
- [Tenda AC18 saveAutoQos stack-based overflow](https://agentprime.io/advisories/CVE-2025-11123.md)
  `CVE-2025-11123` · CVE record: Tenda AC18 · CVSS 8.7 High · Not analysed yet · Published 28 Sept 2025 · Tags: Memory corruption
- [Tenda AC18 WizardHandle stack-based overflow](https://agentprime.io/advisories/CVE-2025-11122.md)
  `CVE-2025-11122` · CVE record: Tenda AC18 · CVSS 8.7 High · Not analysed yet · Published 28 Sept 2025 · Tags: Memory corruption
- [Tenda AC18 AdvSetLanip command injection](https://agentprime.io/advisories/CVE-2025-11121.md)
  `CVE-2025-11121` · CVE record: Tenda AC18 · CVSS 5.3 Medium · Not analysed yet · Published 28 Sept 2025 · Tags: Other injection, Command injection
- [Tenda AC7/AC18 SetLEDCfg formSetSchedLed buffer overflow](https://agentprime.io/advisories/CVE-2025-9023.md)
  `CVE-2025-9023` · CVE record: Tenda AC7 and 1 more · CVSS 8.7 High · Not analysed yet · Published 15 Aug 2025 · Tags: Memory corruption
- [Tenda AC18 Samba smb.conf weak password](https://agentprime.io/advisories/CVE-2025-8182.md)
  `CVE-2025-8182` · CVE record: Tenda AC18 · CVSS 6.3 Medium · Not analysed yet · Published 26 Jul 2025 · Tags: Hard-coded credentials
- [Tenda AC18 AdvSetLanip fromadvsetlanip buffer overflow](https://agentprime.io/advisories/CVE-2025-5609.md)
  `CVE-2025-5609` · CVE record: Tenda AC18 · CVSS 8.7 High · Not analysed yet · Published 4 Jun 2025 · Tags: Memory corruption
- [Tenda AC18 SetSysAutoRebbotCfg formsetreboottimer buffer overflow](https://agentprime.io/advisories/CVE-2025-5608.md)
  `CVE-2025-5608` · CVE record: Tenda AC18 · CVSS 8.7 High · Not analysed yet · Published 4 Jun 2025 · Tags: Memory corruption
- [Tenda AC18 setPptpUserList formSetPPTPUserList buffer overflow](https://agentprime.io/advisories/CVE-2025-5607.md)
  `CVE-2025-5607` · CVE record: Tenda AC18 · CVSS 8.7 High · Not analysed yet · Published 4 Jun 2025 · Tags: Memory corruption
- [Tenda AC18 SetIPTVCfg formSetIptv command injection](https://agentprime.io/advisories/CVE-2025-5606.md)
  `CVE-2025-5606` · CVE record: Tenda AC18 · CVSS 5.3 Medium · Not analysed yet · Published 4 Jun 2025 · Tags: Other injection, Command injection
- [Tenda AC8/AC10/AC18 HTTP Request telnet command injection](https://agentprime.io/advisories/CVE-2025-0528.md)
  `CVE-2025-0528` · CVE record: Tenda AC8 and 2 more · CVSS 8.6 High · Not analysed yet · Published 17 Jan 2025 · Tags: Other injection, Command injection
- [Tenda AC6/AC7/AC8/AC9/AC10/AC10U/AC15/AC18/AC500/AC1206 GetIPTV websReadEvent null pointer dereference](https://agentprime.io/advisories/CVE-2024-10280.md)
  `CVE-2024-10280` · CVE record: Tenda AC6 and 4 more · CVSS 7.1 High · Not analysed yet · Published 23 Oct 2024 · Tags: Memory corruption
- [Tenda AC18 setsambacfg formSetSambaConf os command injection](https://agentprime.io/advisories/CVE-2024-2854.md)
  `CVE-2024-2854` · CVE record: Tenda AC18 · CVSS 6.3 Medium · Not analysed yet · Published 24 Mar 2024 · Tags: Command injection
- [Tenda AC18 SysToolRestoreSet fromSysToolRestoreSet cross-site request forgery](https://agentprime.io/advisories/CVE-2024-2560.md)
  `CVE-2024-2560` · CVE record: Tenda AC18 · CVSS 4.3 Medium · Not analysed yet · Published 17 Mar 2024 · Tags: Cross-site request forgery (CSRF)
- [Tenda AC18 SysToolReboot fromSysToolReboot cross-site request forgery](https://agentprime.io/advisories/CVE-2024-2559.md)
  `CVE-2024-2559` · CVE record: Tenda AC18 · CVSS 4.3 Medium · Not analysed yet · Published 17 Mar 2024 · Tags: Cross-site request forgery (CSRF)
- [Tenda AC18 execCommand formexeCommand stack-based overflow](https://agentprime.io/advisories/CVE-2024-2558.md)
  `CVE-2024-2558` · CVE record: Tenda AC18 · CVSS 8.8 High · Not analysed yet · Published 17 Mar 2024 · Tags: Memory corruption
- [Tenda AC18 R7WebsSecurityHandler stack-based overflow](https://agentprime.io/advisories/CVE-2024-2547.md)
  `CVE-2024-2547` · CVE record: Tenda AC18 · CVSS 8.8 High · Not analysed yet · Published 17 Mar 2024 · Tags: Memory corruption
- [Tenda AC18 fromSetWirelessRepeat stack-based overflow](https://agentprime.io/advisories/CVE-2024-2546.md)
  `CVE-2024-2546` · CVE record: Tenda AC18 · CVSS 8.8 High · Not analysed yet · Published 17 Mar 2024 · Tags: Memory corruption
- [Tenda AC18 openSchedWifi setSchedWifi stack-based overflow](https://agentprime.io/advisories/CVE-2024-2490.md)
  `CVE-2024-2490` · CVE record: Tenda AC18 · CVSS 8.8 High · Not analysed yet · Published 15 Mar 2024 · Tags: Memory corruption
- [Tenda AC18 SetNetControlList formSetQosBand stack-based overflow](https://agentprime.io/advisories/CVE-2024-2489.md)
  `CVE-2024-2489` · CVE record: Tenda AC18 · CVSS 8.8 High · Not analysed yet · Published 15 Mar 2024 · Tags: Memory corruption
- [Tenda AC18 SetPptpServerCfg formSetPPTPServer stack-based overflow](https://agentprime.io/advisories/CVE-2024-2488.md)
  `CVE-2024-2488` · CVE record: Tenda AC18 · CVSS 8.8 High · Not analysed yet · Published 15 Mar 2024 · Tags: Memory corruption
- [Tenda AC18 SetOnlineDevName formSetDeviceName stack-based overflow](https://agentprime.io/advisories/CVE-2024-2487.md)
  `CVE-2024-2487` · CVE record: Tenda AC18 · CVSS 8.8 High · Not analysed yet · Published 15 Mar 2024 · Tags: Memory corruption
- [Tenda AC18 QuickIndex formQuickIndex stack-based overflow](https://agentprime.io/advisories/CVE-2024-2486.md)
  `CVE-2024-2486` · CVE record: Tenda AC18 · CVSS 8.8 High · Not analysed yet · Published 15 Mar 2024 · Tags: Memory corruption
- [Tenda AC18 SetSpeedWan formSetSpeedWan stack-based overflow](https://agentprime.io/advisories/CVE-2024-2485.md)
  `CVE-2024-2485` · CVE record: Tenda AC18 · CVSS 8.8 High · Not analysed yet · Published 15 Mar 2024 · Tags: Memory corruption

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=tenda-ac18>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/tenda-ac18/>. Everything for agents: <https://agentprime.io/llms.txt>.