CVE-2025-10442: Tenda AC15 Firmware
High severity, CVSS 8.8. EPSS: 8.7% chance of exploitation in the next 30 days.
A vulnerability was determined in Tenda AC9 and AC15 15.03.05.14. This affects the function formexeCommand of the file /goform/exeCommand. This manipulation of the argument cmdinput causes os command injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized.
Affected products
Published 2025-09-15. Last modified 2026-06-17.