CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Free accounts get a daily email of the CVEs that match up to 3 of their products on My program; subscribers get each one the moment it is published. Where the data comes from: sources.

Updated under an hour ago (Oct 29, 2026, 11:30 PM ET)

What this means for you

This week: 3,368 CVEs published, 234 critical, and 3 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stackFree account, 3 products This week's critical CVEs Exploited in the last 30 days

Published in the last 7 days: 3,368; Show in the list
Critical, last 7 days: 234; Show in the list
Healthcare-tagged, last 7 days: 5; Show in the list
Known exploited (CISA KEV): 1,762; Show in the list

Showing CVEs that name the product tenda:ac10_firmware. Show all products

10 CVEs

Showing 1 to 10.

CVE	Severity	Title	Published
CVE-2026-19924	Critical 9.8	Tenda AC10 httpd R7WebsSecurityHandler improper authentication Assigned by VulDB	Aug 15, 2026
CVE-2026-16248	High 8.8	Tenda AC10 httpd/netctrl AdvSetLanip fromAdvSetLanip stack-based overflow Assigned by VulDB	Jul 20, 2026
CVE-2026-5550	High 8.8	Tenda AC10 httpd fromSysToolChangePwd stack-based overflow Assigned by VulDB	Apr 5, 2026
CVE-2026-5549	Medium 5.3	Tenda AC10 RSA 2048-bit Private Key privkeySrv.pem hard-coded key Assigned by VulDB	Apr 5, 2026
CVE-2026-5548	High 8.8	Tenda AC10 httpd fromSysToolChangePwd stack-based overflow Assigned by VulDB	Apr 5, 2026
CVE-2026-5547	Medium 6.3	Tenda AC10 httpd formAddMacfilterRule os command injection Assigned by VulDB	Apr 5, 2026
CVE-2025-67074	Medium 6.5	A Buffer overflow vulnerability in function fromAdvSetMacMtuWan of bin httpd in Tenda AC10V4.0 V16.03.10.20 allows remote attackers to cause denial of service and possibly code execution by sending a… Assigned by mitre	Dec 16, 2025
CVE-2025-67073	Critical 9.8	A Buffer overflow vulnerability in function fromAdvSetMacMtuWan of bin httpd in Tenda AC10V4.0 V16.03.10.20 allows remote attackers to cause denial of service and possibly code execution by sending a… Assigned by mitre	Dec 16, 2025
CVE-2025-12622	High 8.8	Tenda AC10 SysRunCmd formSysRunCmd buffer overflow Assigned by VulDB	Nov 3, 2025
CVE-2018-14558 Known exploited	Critical 9.8	An issue was discovered on Tenda AC7 devices with firmware through V15.03.06.44_CN(AC7), AC9 devices with firmware through V15.03.05.19(6318)_CN(AC9), and AC10 devices with firmware through V15.03.06… Assigned by mitre	Oct 30, 2018

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.