CVE-2025-9090mediumobserved exploitationCWE-74CWE-77

CVE-2025-9090: medium-severity vulnerability in Tenda AC20

Tenda AC20 Telnet Service telnet websFormDefine command injection

Published · Updated

Follow this CVE+ Monitor AC20

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

60Vexday Risk Score

Prioritize patching. It exploitation observed by VulnCheck and has a public proof of concept.

ssvc Actcvss 5.3epss 17%
from disclosure to weaponsame day
Published on NVDAug 17
1st PoCAug 17
VulnCheck+406d
A vulnerability was identified in Tenda AC20 16.03.08.12. Affected is the function websFormDefine of the file /goform/telnet of the component Telnet Service. The manipulation leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Affected products
Tenda · AC20
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — Tenda AC20

In the same product, most dangerous first.

CVE-2025-15356HIGHTenda AC20 PowerSaveSet sscanf buffer overflowEPSS 4.0%CVE-2025-14655HIGHTenda AC20 httpd SetSysAutoRebbotCfg formSetRebootTimer stack-based overflowEPSS 3.3%CVE-2025-14654HIGHTenda AC20 httpd setPptpUserList formSetPPTPUserList stack-based overflowEPSS 3.3%CVE-2025-8160HIGHTenda AC20 httpd SetSysTimeCfg buffer overflowEPSS 1.5%CVE-2025-9089HIGHTenda AC20 SetIpMacBind sub_48E628 stack-based overflowEPSS 1.3%CVE-2025-9087HIGHTenda AC20 SetNetControlList Endpoint set_qosMib_list stack-based overflowEPSS 1.3%