Tenda AC10

Name: Tenda AC10
Brand: Tenda

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

3critical10high0medium0low

updated 2026-10-28

vulnerabilities (19)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-0528US	high7.2	6.23% (94th)	—	no fix	2025-01-17	≤ 16.03.10.20
CVE-2026-5547US	high8.8	2.10% (82nd)	—	no fix	2026-04-05	≤ 16.03.10.10_multi_TDE01
CVE-2026-19924US	—	1.42% (73rd)	—	no fix	2026-08-16	≤ 16.03.10.09_multi_TDE01
CVE-2024-2581US	high8.8	1.30% (70th)	—	no fix	2024-03-18	2 versions
CVE-2024-11248US	high8.8	1.26% (69th)	—	no fix	2024-11-15	≤ 16.03.10.13
CVE-2024-11061US	high8.8	1.24% (69th)	—	no fix	2024-11-11	≤ 16.03.10.13
CVE-2024-2856US	critical9.8	1.16% (67th)	—	no fix	2024-03-24	3 versions
CVE-2024-11056US	high8.8	1.08% (65th)	—	no fix	2024-11-10	≤ 16.03.10.13
CVE-2025-8178US	—	0.95% (61st)	—	no fix	2025-07-26	≤ 16.03.10.13
CVE-2025-3161US	—	0.94% (61st)	—	no fix	2025-04-03	≤ 16.03.10.13
CVE-2025-12622US	critical9.8	0.90% (59th)	—	no fix	2025-11-03	≤ 16.03.10.13
CVE-2025-4896US	high7.5	0.89% (59th)	—	no fix	2025-05-18	≤ 16.03.10.13
CVE-2026-16248US	—	0.85% (58th)	—	no fix	2026-07-20	≤ 16.03.10.09_multi_TDE01
CVE-2025-5629US	critical9.8	0.85% (58th)	—	no fix	2025-06-05	48 versions
CVE-2024-10280US	high7.5	0.80% (57th)	—	no fix	2024-10-23	≤ 20241022
CVE-2026-5548US	—	0.57% (47th)	—	no fix	2026-04-05	≤ 16.03.10.10_multi_TDE01
CVE-2026-5550US	—	0.52% (44th)	—	no fix	2026-04-05	≤ 16.03.10.10_multi_TDE01
CVE-2026-5549US	high7.5OT elevated	0.40% (34th)	—	no fix	2026-04-05	≤ 16.03.10.10_multi_TDE01
CVE-2025-9309US	high7.0OT elevated	0.22% (13th)	—	no fix	2025-08-21	≤ 16.03.10.13

The flaw types (CWEs) most of these CVEs share.

CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer12 CVEs
CWE-121Stack-based Buffer Overflow9 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')3 CVEs
CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')2 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')2 CVEs
CWE-787Out-of-bounds Write2 CVEs
CWE-122Heap-based Buffer Overflow1 CVEs
CWE-259Use of Hard-coded Password1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.