CVE-2022-25431: Tenda AC9 Firmware

Critical severity, CVSS 9.8. EPSS: 1.7% chance of exploitation in the next 30 days.

Tenda AC9 v15.03.2.21 was discovered to contain multiple stack overflows via the NPTR, V12, V10 and V11 parameter in the Formsetqosband function.

Affected products

• Tenda AC9 Firmware: version 15.03.2.21 only

Published 2022-03-18. Last modified 2026-06-17.