Monitor vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
8.7
Tenda AC10 Router Allows Remote Password Change Manipulation
CVE-2026-5548
Summary
A security issue in the Tenda AC10 router's password change feature allows an attacker to potentially hijack the device. The issue affects the password change process, which can be exploited remotely. To protect your network, update the router's software to the latest version.
Original title
A vulnerability was found in Tenda AC10 16.03.10.10_multi_TDE01. Affected by this vulnerability is the function fromSysToolChangePwd of the file /bin/httpd. Performing a manipulation of the argumen...
Original description
A vulnerability was found in Tenda AC10 16.03.10.10_multi_TDE01. Affected by this vulnerability is the function fromSysToolChangePwd of the file /bin/httpd. Performing a manipulation of the argument sys.userpass results in stack-based buffer overflow. The attack can be initiated remotely.
nvd CVSS2.0
9.0
nvd CVSS3.1
8.8
nvd CVSS4.0
8.7
Vulnerability type
CWE-119
Buffer Overflow
CWE-121
Stack-based Buffer Overflow
Published: 5 Apr 2026 · Updated: 5 Apr 2026 · First seen: 5 Apr 2026