Tenda AC18 vulnerabilities

2 CVEs affecting Tenda AC18, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-82695, published 2026-08-31.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-82695, published 2026-08-31. Critical severity, CVSS 10.0. EPSS: 1.4% chance of exploitation in the next 30 days. A security flaw has been discovered in Tenda AC18 15.03.05.19. Impacted is an unknown function of the file /goform/telnet of the component Telnet Handler. The manipulation results in missing…
CVE-2026-11528, published 2026-06-08. High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability was found in Tenda AC18 15.03.05.05. The affected element is the function sub_45304 of the file /goform/getRebootStatus of the component Web Management Interface. The manipulation of…