CVE-2025-10443: Tenda AC15 Firmware
High severity, CVSS 8.8. EPSS: 4.2% chance of exploitation in the next 30 days.
A vulnerability was identified in Tenda AC9 and AC15 15.03.05.14/15.03.05.18. This vulnerability affects the function formexeCommand of the file /goform/exeCommand. Such manipulation of the argument cmdinput leads to buffer overflow. The attack can be executed remotely. The exploit is publicly available and might be used.
Affected products
Published 2025-09-15. Last modified 2026-06-17.