CVE-2025-65223: Tenda AC21 Firmware

Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days.

Tenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow via the urls parameter of /goform/saveParentControlInfo.

Affected products

• Tenda AC21 Firmware: version 16.03.08.16 only

Published 2025-11-20. Last modified 2026-06-17.