CVE-2025-29462: Tenda AC15 Firmware

Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days.

A buffer overflow vulnerability has been discovered in Tenda Ac15 V15.13.07.13. The vulnerability occurs when the webCgiGetUploadFile function calls the socketRead function to process HTTP request messages, resulting in the overwriting of a buffer on the stack.

Affected products

• Tenda AC15 Firmware: version 15.13.07.13 only

Published 2025-04-03. Last modified 2026-06-17.