CVE-2025-11386
HighCVSS 8.8Exploitation Probability (EPSS)
Elevated risk56th percentile - higher than 56% of all known CVEs
Summary
A stack-based buffer overflow vulnerability was found in Tenda AC15 version 15.03.05.18. Manipulation of the ddnsEn argument in /goform/SetDDNSCfg allows remote attacks, and the exploit has been publicly disclosed.
Risk Assessment
A remote attacker can exploit this vulnerability to cause a buffer overflow, potentially leading to code execution or device crash. The public availability of the exploit increases the risk.
Recommendation
Update the Tenda AC15 firmware to the latest version or apply measures to restrict access to the management interface. Monitor the vendor for patches.
Other vulnerabilities in Tenda AC15
See all- CVE-2026-11493Medium
A weakness was identified in Tenda AC15 firmware version 15.03.05.19 in the Samba component. Manipulation of the /etc_ro/smb.conf file leads to weak password requirements. The attack is only possible within the local network, has high complexity, and is difficult to exploit, but the exploit is publicly available.
- CVE-2026-5830High
In Tenda AC15 version 15.03.05.18, the function websGetVar in /goform/SysToolChangePwd is vulnerable to stack-based buffer overflow via manipulation of arguments oldPwd/newPwd/cfmPwd. The attack can be executed remotely, and the exploit is publicly available.
- CVE-2025-11388High
A stack-based buffer overflow vulnerability was identified in Tenda AC15 version 15.03.05.18. Manipulation of the newVersion argument in /goform/setNotUpgrade allows remote attacks, and the exploit is publicly available.
- CVE-2025-11387High
A stack-based buffer overflow vulnerability was determined in Tenda AC15 version 15.03.05.18. Manipulation of the Password argument in /goform/fast_setting_pppoe_set allows remote attacks, and the exploit has been publicly disclosed.
- CVE-2025-55564High
A stack overflow vulnerability exists in the Tenda AC15 router firmware version 15.03.05.19_multi_TD01 in the fromSetIpMacBind function via the list parameter. An attacker can remotely crash the device or potentially execute arbitrary code.
Original NVD description (English source)
A vulnerability was found in Tenda AC15 15.03.05.18. The impacted element is an unknown function of the file /goform/SetDDNSCfg of the component POST Parameter Handler. The manipulation of the argument ddnsEn results in stack-based buffer overflow. The attack can be launched remotely. The exploit has been made public and could be used.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS