CVE-2022-40010: Tenda AC6 Firmware

Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days.

Tenda AC6 AC1200 Smart Dual-Band WiFi Router 15.03.06.50_multi was discovered to contain a cross-site scripting (XSS) vulnerability via the deviceId parameter in the Parental Control module.

Affected products

• Tenda AC6 Firmware: version 15.03.06.50_multi only

Published 2023-06-26. Last modified 2026-06-17.