CVE-2026-16248
HighCVSS 8.8Summary
A vulnerability was found in Tenda AC10 version 16.03.10.09_multi_TDE01 in the fromAdvSetLanip function of the /goform/AdvSetLanip file. Manipulation of the GetValue/SetValue arguments leads to a stack-based buffer overflow, which can be exploited remotely.
Risk Assessment
An attacker can remotely take control of the device, potentially leading to network compromise, traffic interception, or further attacks on the infrastructure.
Recommendation
Immediately update the firmware of the Tenda AC10 device to the latest available version if a patch is provided. If no update is available, consider disabling or replacing the device.
Other vulnerabilities in Tenda AC10
See all- CVE-2026-19924Critical
A vulnerability has been detected in the Tenda AC10 router version 16.03.10.09_multi_TDE01. It affects the R7WebsSecurityHandler function in the httpd component, leading to improper authentication. The attack can be initiated remotely, and the exploit has been publicly disclosed.
- CVE-2026-51380Critical
A buffer overflow vulnerability in Tenda AC10 v3 (firmware V03.03.16.09) allows attackers to cause a permanent Denial of Service (DoS) or potentially execute remote code via the /cgi-bin/UploadCfg endpoint.
- CVE-2023-40904Critical
A stack overflow was discovered in Tenda AC10 v4 related to the parameters macFilterType and deviceList at the endpoint /goform/setMacFilterCfg.
- CVE-2023-37144Critical
A command injection vulnerability was discovered in Tenda AC10 v15.03.06.26 via the mac parameter in the function formWriteFacMac.
- CVE-2026-5550High
A stack-based buffer overflow vulnerability was identified in the fromSysToolChangePwd function of the /bin/httpd file in Tenda AC10 firmware version 16.03.10.10_multi_TDE01. The attack can be initiated remotely and may affect multiple endpoints.
- CVE-2026-5549Medium
Vulnerability in Tenda AC10 version 16.03.10.10_multi_TDE01, in the file /webroot_ro/pem/privkeySrv.pem of the RSA 2048-bit Private Key Handler component. Manipulation leads to use of a hard-coded cryptographic key. Remote attack possible, exploit publicly available.
- CVE-2026-5548High
A stack-based buffer overflow vulnerability has been found in Tenda AC10 16.03.10.10_multi_TDE01 in the function fromSysToolChangePwd of the file /bin/httpd. Manipulating the argument sys.userpass results in buffer overflow, and the attack can be initiated remotely.
- CVE-2026-5547Medium
In the Tenda AC10 router version 16.03.10.10_multi_TDE01, the function formAddMacfilterRule in file /bin/httpd is vulnerable to OS command injection. The attack can be performed remotely, and multiple endpoints may be affected.
- CVE-2023-34571Medium
A stack overflow was discovered in the Tenda AC10 v4 device related to the shareSpeed parameter at the /goform/WifiGuestSet endpoint.
- CVE-2023-34569Medium
A stack overflow was discovered in the Tenda AC10 v4 device via parameter list at the /goform/SetNetControlList endpoint.
Original NVD description (English source)
A vulnerability was found in Tenda AC10 16.03.10.09_multi_TDE01. This issue affects the function fromAdvSetLanip of the file /goform/AdvSetLanip of the component httpd/netctrl. The manipulation of the argument GetValue/SetValue results in stack-based buffer overflow. The attack may be performed from remote. The exploit has been made public and could be used.