CVE-2025-29135: Tenda AC7 Firmware

Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days.

A stack-based buffer overflow vulnerability in Tenda AC7 V15.03.06.44 allows a remote attacker to execute arbitrary code through a stack overflow attack using the security parameter of the formWifiBasicSet function.

Affected products

• Tenda AC7 Firmware: version 15.03.06.44 only

Published 2025-03-24. Last modified 2026-06-17.