CVE-2025-50528: Tenda AC6 Firmware

High severity, CVSS 7.3. EPSS: 0.4% chance of exploitation in the next 30 days.

A buffer overflow vulnerability exists in the fromNatStaticSetting function of Tenda AC6 <=V15.03.05.19 via the page parameter.

Affected products

• Tenda AC6 Firmware: up to and including 15.03.05.19

Published 2025-06-27. Last modified 2026-06-17.