CVE-2026-5547: falha de média gravidade em Tenda AC10
Tenda AC10 httpd formAddMacfilterRule os command injection
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.3epss 2.1%
A vulnerability has been found in Tenda AC10 16.03.10.10_multi_TDE01. Affected is the function formAddMacfilterRule of the file /bin/httpd. Such manipulation leads to os command injection. It is possible to launch the attack remotely. Multiple endpoints might be affected.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X
Produtos afetados
Tenda · AC10CVEs relacionadas — Tenda AC10
No mesmo produto, das mais perigosas para as menos.
CVE-2025-0528HIGHTenda AC8/AC10/AC18 HTTP Request telnet command injectionEPSS 6.2%CVE-2026-19924CRITICALTenda AC10 httpd R7WebsSecurityHandler improper authenticationEPSS 1.4%CVE-2024-2581HIGHTenda AC10 SetStaticRouteCfg fromSetRouteStatic stack-based overflowEPSS 1.3%CVE-2024-11248HIGHTenda AC10 SetSysAutoRebbotCfg formSetRebootTimer stack-based overflowEPSS 1.3%CVE-2024-11061HIGHTenda AC10 fast_setting_wifi_set FUN_0044db3c stack-based overflowEPSS 1.2%CVE-2024-2856HIGHTenda AC10 SetSysTimeCfg fromSetSysTime stack-based overflowEPSS 1.2%