Tenda AC23 Firmware vulnerabilities

27 CVEs affecting Tenda AC23 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-1420, published 2026-01-26.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-2649, published 2023-05-11. High severity, CVSS 8.8. EPSS: 9.7% chance of exploitation in the next 30 days. A vulnerability was found in Tenda AC23 16.03.07.45_cn. It has been declared as critical. This vulnerability affects unknown code of the file /bin/ate of the component Service Port 7329. The…
CVE-2025-9605, published 2025-08-29. Critical severity, CVSS 9.8. EPSS: 5.6% chance of exploitation in the next 30 days. A security vulnerability has been detected in Tenda AC21 and AC23 16.03.08.16. Affected is the function GetParentControlInfo of the file /goform/GetParentControlInfo. Such manipulation of the…
CVE-2026-1420, published 2026-01-26. Critical severity, CVSS 9.8. EPSS: 3.9% chance of exploitation in the next 30 days. A flaw has been found in Tenda AC23 16.03.07.52. This impacts an unknown function of the file /goform/WifiExtraSet. This manipulation of the argument wpapsk_crypto causes buffer overflow. Remote…
CVE-2026-0640, published 2026-01-06. Critical severity, CVSS 9.8. EPSS: 3.5% chance of exploitation in the next 30 days. A weakness has been identified in Tenda AC23 16.03.07.52. This affects the function sscanf of the file /goform/PowerSaveSet. Executing a manipulation of the argument Time can lead to buffer overflow.…
CVE-2023-0782, published 2023-02-11. Critical severity, CVSS 9.8. EPSS: 1.5% chance of exploitation in the next 30 days. A vulnerability was found in Tenda AC23 16.03.07.45 and classified as critical. Affected by this issue is the function formSetSysToolDDNS/formGetSysToolDDNS of the file /bin/httpd. The manipulation…
CVE-2025-12596, published 2025-11-02. Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days. A security vulnerability has been detected in Tenda AC23 16.03.07.52. Affected is the function saveParentControlInfo of the file /goform/saveParentControlInfo. Such manipulation of the argument Time…
CVE-2025-12595, published 2025-11-02. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. A weakness has been identified in Tenda AC23 16.03.07.52. This impacts the function formSetVirtualSer of the file /goform/SetVirtualServerCfg. This manipulation of the argument list causes buffer…
CVE-2022-43106, published 2022-11-03. Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days. Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the schedStartTime parameter in the setSchedWifi function.
CVE-2022-43104, published 2022-11-03. Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days. Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the wpapsk_crypto parameter in the fromSetWirelessRepeat function.
CVE-2022-43108, published 2022-11-03. Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days. Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the firewallEn parameter in the formSetFirewallCfg function.

Latest

CVE-2025-15217, published 2025-12-30. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. A security flaw has been discovered in Tenda AC23 16.03.07.52. Affected is the function formSetPPTPUserList of the component HTTP POST Request Handler. Performing a manipulation of the argument list…
CVE-2025-15216, published 2025-12-30. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. A vulnerability was identified in Tenda AC23 16.03.07.52. This impacts the function fromSetIpMacBind of the file /goform/SetIpMacBind. Such manipulation of the argument bindnum leads to stack-based…
CVE-2025-11356, published 2025-10-07. High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days. A vulnerability was found in Tenda AC23 up to 16.03.07.52. Affected by this issue is the function sscanf of the file /goform/SetStaticRouteCfg. The manipulation of the argument list results in buffer…
CVE-2025-10803, published 2025-09-22. High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days. A vulnerability has been found in Tenda AC23 up to 16.03.07.52. Affected by this vulnerability is the function sscanf of the file /goform/SetPptpServerCfg of the component HTTP POST Request Handler.…
CVE-2025-8060, published 2025-07-23. High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days. A vulnerability has been found in Tenda AC23 16.03.07.52 and classified as critical. Affected by this vulnerability is the function sub_46C940 of the file /goform/setMacFilterCfg of the component…