Tenda AC21 Firmware vulnerabilities

29 CVEs affecting Tenda AC21 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-4565, published 2026-03-23.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-9605, published 2025-08-29. Critical severity, CVSS 9.8. EPSS: 5.6% chance of exploitation in the next 30 days. A security vulnerability has been detected in Tenda AC21 and AC23 16.03.08.16. Affected is the function GetParentControlInfo of the file /goform/GetParentControlInfo. Such manipulation of the…
CVE-2025-13446, published 2025-11-20. Critical severity, CVSS 9.8. EPSS: 3.9% chance of exploitation in the next 30 days. A vulnerability has been found in Tenda AC21 16.03.08.16. This vulnerability affects unknown code of the file /goform/SetSysTimeCfg. The manipulation of the argument timeZone/time leads to…
CVE-2025-13445, published 2025-11-20. Critical severity, CVSS 9.8. EPSS: 3.9% chance of exploitation in the next 30 days. A flaw has been found in Tenda AC21 16.03.08.16. This affects an unknown part of the file /goform/SetIpMacBind. Executing a manipulation of the argument list can lead to stack-based buffer overflow.…
CVE-2025-65222, published 2025-11-20. Medium severity, CVSS 4.3. EPSS: 2.4% chance of exploitation in the next 30 days. Tenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow via the rebootTime parameter of /goform/SetSysAutoRebbotCfg.
CVE-2026-1638, published 2026-01-30. High severity, CVSS 8.8. EPSS: 2.2% chance of exploitation in the next 30 days. A security flaw has been discovered in Tenda AC21 1.1.1.1/1.dmzip/16.03.08.16. The impacted element is the function mDMZSetCfg of the file /goform/mDMZSetCfg. The manipulation of the argument dmzIp…
CVE-2025-10838, published 2025-09-23. High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days. A vulnerability was identified in Tenda AC21 16.03.08.16. The affected element is the function sub_45BB10 of the file /goform/WifiExtraSet. The manipulation of the argument wpapsk_crypto leads to…
CVE-2022-40076, published 2022-09-19. High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days. Tenda AC21 V16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, function: fromSetWifiGusetBasic.
CVE-2022-40075, published 2022-09-19. High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days. Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, form_fast_setting_wifi_set.
CVE-2022-40074, published 2022-09-19. High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days. Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, setSchedWifi.
CVE-2022-40073, published 2022-09-19. High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days. Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, saveParentControlInfo.

Latest

CVE-2026-4565, published 2026-03-23. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability was detected in Tenda AC21 16.03.08.16. Impacted is the function formSetQosBand of the file /goform/SetNetControlList. Performing a manipulation of the argument list results in buffer…
CVE-2026-2148, published 2026-02-08. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. A security vulnerability has been detected in Tenda AC21 16.03.08.16. Affected is an unknown function of the file /cgi-bin/DownloadFlash of the component Web Management Interface. The manipulation…
CVE-2026-2147, published 2026-02-08. Medium severity, CVSS 5.3. EPSS: 0.6% chance of exploitation in the next 30 days. A weakness has been identified in Tenda AC21 16.03.08.16. This impacts an unknown function of the file /cgi-bin/DownloadLog of the component Web Management Interface. Executing a manipulation can…
CVE-2026-1637, published 2026-01-29. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. A vulnerability was identified in Tenda AC21 16.03.08.16. The affected element is the function fromAdvSetMacMtuWan of the file /goform/AdvSetMacMtuWan. The manipulation leads to stack-based buffer…
CVE-2025-65226, published 2025-11-20. Medium severity, CVSS 4.3. EPSS: 0.2% chance of exploitation in the next 30 days. Tenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow via the deviceId parameter in /goform/saveParentControlInfo.
CVE-2025-65223, published 2025-11-20. Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days. Tenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow via the urls parameter of /goform/saveParentControlInfo.
CVE-2025-65221, published 2025-11-20. Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days. Tenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow via the list parameter of /goform/setPptpUserList.
CVE-2025-65220, published 2025-11-20. Medium severity, CVSS 4.3. EPSS: 0.2% chance of exploitation in the next 30 days. Tenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow in: /goform/SetVirtualServerCfg via the list parameter.