CVE-2025-65221: Tenda AC21 Firmware

Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days.

Tenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow via the list parameter of /goform/setPptpUserList.

Affected products

• Tenda AC21 Firmware: version 16.03.08.16 only

Published 2025-11-20. Last modified 2026-06-17.