CVE-2025-9731: low-severity vulnerability in Tenda AC9
Tenda AC9 Administrative shadow hard-coded credentials
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
8Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 2epss 0.2%
A vulnerability was determined in Tenda AC9 15.03.05.19. The impacted element is an unknown function of the file /etc_ro/shadow of the component Administrative Interface. This manipulation causes hard-coded credentials. It is possible to launch the attack on the local host. The attack's complexity is rated as high. The exploitability is regarded as difficult. The exploit has been publicly disclosed and may be utilized.
CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P
Affected products
Tenda · AC9Related CVEs — Tenda AC9
In the same product, most dangerous first.
CVE-2025-10442MEDIUMTenda AC9/AC15 exeCommand formexeCommand os command injectionEPSS 9.2%CVE-2025-10443HIGHTenda AC9/AC15 exeCommand formexeCommand buffer overflowEPSS 4.6%CVE-2025-5836MEDIUMTenda AC9 POST Request SetIPTVCfg formSetIptv command injectionEPSS 2.9%CVE-2025-5839HIGHTenda AC9 POST Request AdvSetLanip fromadvsetlanip buffer overflowEPSS 1.1%CVE-2025-5847HIGHTenda AC9 HTTP POST Request SetRemoteWebCfg formSetSafeWanWebMan stack-based overflowEPSS 1.1%CVE-2026-86300MEDIUMTenda AC9 Web Management R7WebsSecurityHandler improper authenticationEPSS 0.8%