Tenda AC15

Name: Tenda AC15
Brand: Tenda

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

14critical7high2medium0low

updated 2026-10-28

vulnerabilities (37)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-10442US	high8.8	9.16% (95th)	—	no fix	2025-09-15	≤ 15.03.05.14
CVE-2025-0566US	—	9.10% (95th)	—	no fix	2025-01-19	≤ 15.13.07.13
CVE-2025-5850US	—	6.40% (94th)	—	no fix	2025-06-08	≤ 15.03.05.19_multi
CVE-2025-10443US	—	4.57% (92nd)	—	no fix	2025-09-15	2 versions
CVE-2024-2812US	high8.8	4.05% (91st)	—	no fix	2024-03-22	3 versions
CVE-2024-2851US	critical9.8	4.01% (91st)	—	no fix	2024-03-24	3 versions
CVE-2024-2809US	critical9.8	1.92% (80th)	—	no fix	2024-03-22	3 versions
CVE-2024-2805US	high8.8	1.60% (76th)	—	no fix	2024-03-22	3 versions
CVE-2024-2811US	critical9.8	1.54% (75th)	—	no fix	2024-03-22	2 versions
CVE-2024-2808US	critical9.8	1.37% (72nd)	—	no fix	2024-03-22	3 versions
CVE-2024-2807US	critical9.8	1.37% (72nd)	—	no fix	2024-03-22	3 versions
CVE-2024-2815US	critical9.8	1.31% (71st)	—	no fix	2024-03-22	2 versions
CVE-2024-2814US	critical9.8	1.31% (71st)	—	no fix	2024-03-22	2 versions
CVE-2024-2813US	critical9.8	1.31% (71st)	—	no fix	2024-03-22	2 versions
CVE-2024-2810US	critical9.8	1.31% (71st)	—	no fix	2024-03-22	3 versions
CVE-2024-2806US	critical9.8	1.31% (71st)	—	no fix	2024-03-22	3 versions
CVE-2024-10662US	high8.8	1.30% (70th)	—	no fix	2024-11-01	≤ 15.03.05.19
CVE-2024-2855US	critical9.8	1.30% (70th)	—	no fix	2024-03-24	4 versions
CVE-2024-2852US	critical9.8	1.30% (70th)	—	no fix	2024-03-24	2 versions
CVE-2024-2850US	critical9.8	1.30% (70th)	—	no fix	2024-03-24	2 versions
CVE-2024-10661US	high8.8	1.16% (67th)	—	no fix	2024-11-01	≤ 15.03.05.19
CVE-2025-3786US	high8.8	1.13% (66th)	—	no fix	2025-04-18	20 versions
CVE-2025-5851US	—	0.98% (62nd)	—	no fix	2025-06-09	≤ 15.03.05.19_multi
CVE-2025-5849US	—	0.98% (62nd)	—	no fix	2025-06-08	≤ 15.03.05.19_multi
CVE-2025-5848US	—	0.98% (62nd)	—	no fix	2025-06-08	≤ 15.03.05.19_multi
CVE-2026-3400US	critical9.8	0.98% (62nd)	—	no fix	2026-03-02	14 versions
CVE-2025-11386US	—	0.85% (58th)	—	no fix	2025-10-07	≤ 15.03.05.18
CVE-2025-11389US	—	0.82% (57th)	—	no fix	2025-10-07	≤ 15.03.05.18
CVE-2025-11388US	—	0.82% (57th)	—	no fix	2025-10-07	≤ 15.03.05.18
CVE-2025-11387US	—	0.82% (57th)	—	no fix	2025-10-07	≤ 15.03.05.18
CVE-2024-10280US	high7.5	0.80% (57th)	—	no fix	2024-10-23	≤ 20241022
CVE-2026-4975US	—	0.64% (51st)	—	no fix	2026-03-27	≤ 15.03.05.19
CVE-2026-5830US	—	0.63% (50th)	—	no fix	2026-04-09	≤ 15.03.05.18
CVE-2025-8979US	—OT elevated	0.44% (38th)	—	no fix	2025-08-14	≤ 15.13.07.13
CVE-2024-2816US	medium6.5	0.36% (30th)	—	no fix	2024-03-22	2 versions
CVE-2024-2817US	medium6.5	0.34% (27th)	—	no fix	2024-03-22	2 versions
CVE-2026-11493US	—	0.22% (13th)	—	no fix	2026-06-08	≤ 15.03.05.19

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer26 CVEs
CWE-121Stack-based Buffer Overflow24 CVEs
CWE-787Out-of-bounds Write6 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')5 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')3 CVEs
CWE-352Cross-Site Request Forgery (CSRF)2 CVEs
CWE-345Insufficient Verification of Data Authenticity1 CVEs
CWE-476NULL Pointer Dereference1 CVEs

sources (1)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)37 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan