Tenda AC20 Firmware vulnerabilities

20 CVEs affecting Tenda AC20 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-15356, published 2025-12-30.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-9090, published 2025-08-17. Critical severity, CVSS 9.8. EPSS: 16.7% chance of exploitation in the next 30 days. A vulnerability was identified in Tenda AC20 16.03.08.12. Affected is the function websFormDefine of the file /goform/telnet of the component Telnet Service. The manipulation leads to command…
CVE-2025-15356, published 2025-12-30. High severity, CVSS 8.8. EPSS: 4% chance of exploitation in the next 30 days. A vulnerability has been found in Tenda AC20 up to 16.03.08.12. The impacted element is the function sscanf of the file /goform/PowerSaveSet. The manipulation of the argument…
CVE-2025-14655, published 2025-12-14. High severity, CVSS 8.8. EPSS: 3.3% chance of exploitation in the next 30 days. A security flaw has been discovered in Tenda AC20 16.03.08.12. The impacted element is the function formSetRebootTimer of the file /goform/SetSysAutoRebbotCfg of the component httpd. Performing a…
CVE-2025-14654, published 2025-12-14. High severity, CVSS 8.8. EPSS: 3.3% chance of exploitation in the next 30 days. A vulnerability was identified in Tenda AC20 16.03.08.12. The affected element is the function formSetPPTPUserList of the file /goform/setPptpUserList of the component httpd. Such manipulation of the…
CVE-2025-8160, published 2025-07-25. High severity, CVSS 8.8. EPSS: 1.5% chance of exploitation in the next 30 days. A vulnerability classified as critical has been found in Tenda AC20 up to 16.03.08.12. Affected is an unknown function of the file /goform/SetSysTimeCfg of the component httpd. The manipulation of…
CVE-2025-9089, published 2025-08-17. Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days. A vulnerability was determined in Tenda AC20 16.03.08.12. This issue affects the function sub_48E628 of the file /goform/SetIpMacBind. The manipulation of the argument list leads to stack-based…
CVE-2025-9087, published 2025-08-16. Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days. A vulnerability has been found in Tenda AC20 16.03.08.12. This affects the function set_qosMib_list of the file /goform/SetNetControlList of the component SetNetControlList Endpoint. The manipulation…
CVE-2025-8131, published 2025-07-25. High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days. A vulnerability was found in Tenda AC20 16.03.08.05. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /goform/SetStaticRouteCfg. The…
CVE-2025-8810, published 2025-08-10. High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days. A vulnerability classified as critical was found in Tenda AC20 16.03.08.05. Affected by this vulnerability is the function strcpy of the file /goform/SetFirewallCfg. The manipulation of the argument…
CVE-2025-8939, published 2025-08-14. High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days. A vulnerability was determined in Tenda AC20 up to 16.03.08.12. Affected is an unknown function of the file /goform/WifiGuestSet. The manipulation of the argument shareSpeed leads to buffer overflow.…

Latest

CVE-2025-14656, published 2025-12-14. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. A weakness has been identified in Tenda AC20 16.03.08.12. This affects the function httpd of the file /goform/openSchedWifi. Executing a manipulation of the argument schedStartTime/schedEndTime can…
CVE-2025-13258, published 2025-11-17. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. A vulnerability was detected in Tenda AC20 up to 16.03.08.12. The impacted element is an unknown function of the file /goform/WifiExtraSet. The manipulation of the argument wpapsk_crypto results in…
CVE-2025-11385, published 2025-10-07. High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days. A vulnerability has been found in Tenda AC20 up to 16.03.08.12. The affected element is the function sscanf of the file /goform/fast_setting_wifi_set. The manipulation of the argument timeZone leads…
CVE-2025-10815, published 2025-09-22. High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days. A vulnerability was identified in Tenda AC20 up to 16.03.08.12. Affected by this issue is the function strcpy of the file /goform/SetPptpServerCfg of the component HTTP POST Request Handler. Such…
CVE-2025-10120, published 2025-09-09. High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days. A vulnerability was detected in Tenda AC20 up to 16.03.08.12. The impacted element is the function strcpy of the file /goform/GetParentControlInfo. The manipulation of the argument mac results in…
CVE-2025-9791, published 2025-09-01. Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days. A weakness has been identified in Tenda AC20 16.03.08.05. This vulnerability affects unknown code of the file /goform/fromAdvSetMacMtuWan. This manipulation of the argument wanMTU causes stack-based…
CVE-2025-9091, published 2025-08-17. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. A security flaw has been discovered in Tenda AC20 16.03.08.12. Affected by this vulnerability is an unknown functionality of the file /etc_ro/shadow. The manipulation leads to hard-coded credentials.…