CVE-2026-5547: Tenda AC10 Firmware

High severity, CVSS 8.8. EPSS: 4.1% chance of exploitation in the next 30 days.

A vulnerability has been found in Tenda AC10 16.03.10.10_multi_TDE01. Affected is the function formAddMacfilterRule of the file /bin/httpd. Such manipulation leads to os command injection. It is possible to launch the attack remotely. Multiple endpoints might be affected.

Affected products

• Tenda AC10 Firmware: version 16.03.10.10_multi_tde01 only

Published 2026-04-05. Last modified 2026-07-24.