CVE-2025-12622
HighCVSS 8.8Exploitation Probability (EPSS)
Elevated risk59th percentile - higher than 59% of all known CVEs
Summary
A vulnerability was found in Tenda AC10 version 16.03.10.13 in the formSysRunCmd function of /goform/SysRunCmd. Manipulation of the getui argument causes a buffer overflow. The attack may be initiated remotely, and the exploit has been publicly disclosed and may be used.
Risk Assessment
A remote attacker could exploit the buffer overflow to destabilize the device or potentially execute code. Public availability of the exploit increases the risk.
Recommendation
Update Tenda AC10 firmware to the latest version if the vendor has released a fix, or isolate the device from internet access. Consider replacing the device with a supported model.
Other vulnerabilities in Tenda AC10
See all- CVE-2026-16248High
A vulnerability was found in Tenda AC10 version 16.03.10.09_multi_TDE01 in the fromAdvSetLanip function of the /goform/AdvSetLanip file. Manipulation of the GetValue/SetValue arguments leads to a stack-based buffer overflow, which can be exploited remotely.
- CVE-2026-19924Critical
A vulnerability has been detected in the Tenda AC10 router version 16.03.10.09_multi_TDE01. It affects the R7WebsSecurityHandler function in the httpd component, leading to improper authentication. The attack can be initiated remotely, and the exploit has been publicly disclosed.
- CVE-2026-51380Critical
A buffer overflow vulnerability in Tenda AC10 v3 (firmware V03.03.16.09) allows attackers to cause a permanent Denial of Service (DoS) or potentially execute remote code via the /cgi-bin/UploadCfg endpoint.
- CVE-2023-40904Critical
A stack overflow was discovered in Tenda AC10 v4 related to the parameters macFilterType and deviceList at the endpoint /goform/setMacFilterCfg.
- CVE-2023-37144Critical
A command injection vulnerability was discovered in Tenda AC10 v15.03.06.26 via the mac parameter in the function formWriteFacMac.
- CVE-2026-5550High
A stack-based buffer overflow vulnerability was identified in the fromSysToolChangePwd function of the /bin/httpd file in Tenda AC10 firmware version 16.03.10.10_multi_TDE01. The attack can be initiated remotely and may affect multiple endpoints.
- CVE-2026-5549Medium
Vulnerability in Tenda AC10 version 16.03.10.10_multi_TDE01, in the file /webroot_ro/pem/privkeySrv.pem of the RSA 2048-bit Private Key Handler component. Manipulation leads to use of a hard-coded cryptographic key. Remote attack possible, exploit publicly available.
- CVE-2026-5548High
A stack-based buffer overflow vulnerability has been found in Tenda AC10 16.03.10.10_multi_TDE01 in the function fromSysToolChangePwd of the file /bin/httpd. Manipulating the argument sys.userpass results in buffer overflow, and the attack can be initiated remotely.
- CVE-2026-5547Medium
In the Tenda AC10 router version 16.03.10.10_multi_TDE01, the function formAddMacfilterRule in file /bin/httpd is vulnerable to OS command injection. The attack can be performed remotely, and multiple endpoints may be affected.
- CVE-2025-57220Medium
An input validation flaw in the 'ate' service of Tenda AC10 v4.0 firmware v16.03.10.09_multi_TDE01 to escalate privileges to root via a crafted UDP packet.
Original NVD description (English source)
A vulnerability was determined in Tenda AC10 16.03.10.13. Affected by this vulnerability is the function formSysRunCmd of the file /goform/SysRunCmd. This manipulation of the argument getui causes buffer overflow. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS