CVE-2018-5768: Tendacn AC15 Firmware

Critical severity, CVSS 9.8. EPSS: 3.5% chance of exploitation in the next 30 days.

A remote, unauthenticated attacker can gain remote code execution on the the Tenda AC15 router with a specially crafted password parameter for the COOKIE header.

Affected products

• Tendacn AC15 Firmware: affected versions not specified

Published 2018-03-20. Last modified 2026-06-17.