CVE-2025-11523
MediumCVSS 6.3Exploitation Probability (EPSS)
High risk90th percentile - higher than 90% of all known CVEs
Summary
A vulnerability was detected in Tenda AC7 15.03.06.44. This vulnerability affects unknown code of the file /goform/AdvSetLanip. The manipulation of the argument lanIp results in command injection. It is possible to launch the attack remotely. The exploit is now public and may be used.
Risk Assessment
An attacker can remotely execute arbitrary commands on the router, potentially leading to full control of the device and network.
Recommendation
Apply firmware updates from the vendor or restrict access to the device from trusted networks.
Other vulnerabilities in Tenda AC7
See all- CVE-2026-51846Critical
In Tenda AC7 firmware version 15.03.06.44, a stack buffer overflow vulnerability exists in the wanSpeed parameter of the /goform/AdvSetMacMtuWan route. This can lead to remote arbitrary code execution.
- CVE-2026-51845Critical
A stack buffer overflow vulnerability was discovered in the Tenda AC7 router firmware version 15.03.06.44 in the /goform/AdvSetMacMtuWan interface via the mac parameter. An attacker can remotely crash the device or potentially execute arbitrary code.
- CVE-2026-51844Critical
A stack buffer overflow vulnerability was discovered in the Tenda AC7 router firmware version 15.03.06.44 in the /goform/AdvSetMacMtuWan interface via the cloneType parameter. An attacker can exploit this flaw to execute arbitrary code remotely or cause a denial of service.
- CVE-2026-51843Critical
A stack buffer overflow vulnerability exists in Tenda AC7 firmware version 15.03.06.44 in the /goform/AdvSetMacMtuWan interface via the wanMTU parameter. An attacker can remotely crash the device or potentially execute arbitrary code.
Original NVD description (English source)
A vulnerability was detected in Tenda AC7 15.03.06.44. This vulnerability affects unknown code of the file /goform/AdvSetLanip. The manipulation of the argument lanIp results in command injection. It is possible to launch the attack remotely. The exploit is now public and may be used.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS