Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

AC18 — Vulnerabilities & Security Advisories 28

All 28 CVE vulnerabilities found in AC18, with AI-generated Chinese analysis, references, and POCs.

This page documents common weaknesses associated with the AC18 product managed by its respective vendor, focusing on software security vulnerabilities. It aggregates data related to flaws that may allow unauthorized access, data leakage, or service disruption within the AC18 ecosystem. The content covers a comprehensive time range, collecting reports from initial discovery through to official remediation efforts to provide a historical perspective on the product's security posture. Readers can utilize this resource to track vendor advisories and stay informed about ongoing security updates for AC18. It serves as a centralized reference for understanding specific weakness classes that impact this technology, allowing security professionals to analyze patterns in reported bugs. Users can also look up the complete vulnerability history of the AC18 product to assess long-term stability and risk exposure. By consolidating these details, the page helps teams evaluate the effectiveness of past fixes and prioritize future mitigation strategies. This information is crucial for maintaining a secure deployment environment and ensuring compliance with industry security standards. The aggregation process ensures that both critical and low-severity issues are documented for thorough review, facilitating better decision-making for administrators and developers who rely on AC18 for their operations.

Vendor: Tenda

CVE IDTitleCVSSSeverityPublished
CVE-2026-11528 Tenda AC18 Web Management getRebootStatus sub_45304 stack-based overflow CWE-121 8.8 High2026-06-08
CVE-2025-14993 Tenda AC18 HTTP Request SetDlnaCfg sprintf stack-based overflow CWE-121 8.8 High2025-12-21
CVE-2025-14992 Tenda AC18 HTTP Request GetParentControlInfo strcpy stack-based overflow CWE-121 8.8 High2025-12-21
CVE-2025-11328 Tenda AC18 SetDDNSCfg stack-based overflow CWE-121 8.8 High2025-10-06
CVE-2025-11327 Tenda AC18 SetUpnpCfg stack-based overflow CWE-121 8.8 High2025-10-06
CVE-2025-11326 Tenda AC18 WifiMacFilterSet stack-based overflow CWE-121 8.8 High2025-10-06
CVE-2025-11325 Tenda AC18 fast_setting_pppoe_set stack-based overflow CWE-121 8.8 High2025-10-06
CVE-2025-11324 Tenda AC18 setNotUpgrade stack-based overflow CWE-121 8.8 High2025-10-06
CVE-2025-11123 Tenda AC18 saveAutoQos stack-based overflow CWE-121 8.8 High2025-09-28
CVE-2025-11122 Tenda AC18 WizardHandle stack-based overflow CWE-121 8.8 High2025-09-28
CVE-2025-11121 Tenda AC18 AdvSetLanip command injection CWE-77 6.3 Medium2025-09-28
CVE-2025-8182 Tenda AC18 Samba smb.conf weak password CWE-521 5.6 Medium2025-07-26
CVE-2025-5609 Tenda AC18 AdvSetLanip fromadvsetlanip buffer overflow CWE-120 8.8 High2025-06-04
CVE-2025-5608 Tenda AC18 SetSysAutoRebbotCfg formsetreboottimer buffer overflow CWE-120 8.8 High2025-06-04
CVE-2025-5607 Tenda AC18 setPptpUserList formSetPPTPUserList buffer overflow CWE-120 8.8 High2025-06-04
CVE-2025-5606 Tenda AC18 SetIPTVCfg formSetIptv command injection CWE-77 6.3 Medium2025-06-04
CVE-2024-2854 Tenda AC18 setsambacfg formSetSambaConf os command injection CWE-78 6.3 Medium2024-03-24
CVE-2024-2560 Tenda AC18 SysToolRestoreSet fromSysToolRestoreSet cross-site request forgery CWE-352 4.3 Medium2024-03-17
CVE-2024-2559 Tenda AC18 SysToolReboot fromSysToolReboot cross-site request forgery CWE-352 4.3 Medium2024-03-17
CVE-2024-2558 Tenda AC18 execCommand formexeCommand stack-based overflow CWE-121 8.8 High2024-03-17
CVE-2024-2547 Tenda AC18 R7WebsSecurityHandler stack-based overflow CWE-121 8.8 High2024-03-17
CVE-2024-2546 Tenda AC18 fromSetWirelessRepeat stack-based overflow CWE-121 8.8 High2024-03-17
CVE-2024-2490 Tenda AC18 openSchedWifi setSchedWifi stack-based overflow CWE-121 8.8 High2024-03-15
CVE-2024-2489 Tenda AC18 SetNetControlList formSetQosBand stack-based overflow CWE-121 8.8 High2024-03-15
CVE-2024-2488 Tenda AC18 SetPptpServerCfg formSetPPTPServer stack-based overflow CWE-121 8.8 High2024-03-15
CVE-2024-2487 Tenda AC18 SetOnlineDevName formSetDeviceName stack-based overflow CWE-121 8.8 High2024-03-15
CVE-2024-2486 Tenda AC18 QuickIndex formQuickIndex stack-based overflow CWE-121 8.8 High2024-03-15
CVE-2024-2485 Tenda AC18 SetSpeedWan formSetSpeedWan stack-based overflow CWE-121 8.8 High2024-03-15

All 28 known CVE vulnerabilities affecting AC18 with full Chinese analysis, references, and POCs where available.