CVE-2025-45779: Tenda AC10 Firmware

Critical severity, CVSS 9.8. EPSS: 6.8% chance of exploitation in the next 30 days.

Tenda AC10 V1.0re_V15.03.06.46 is vulnerable to Buffer Overflow in the formSetPPTPUserList handler via the list POST parameter.

Affected products

• Tenda AC10 Firmware: version 15.03.06.46 only

Published 2025-05-12. Last modified 2026-06-17.