https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-5550.htmlhttps://patchthecve.com/cve/CVE-2026-5550.htmlFri, 24 Jul 2026 20:10:00 +0000HIGH 8.8: A vulnerability was identified in Tenda AC10 16.03.10.10_multi_TDE01. This affects the function fromSysToolChangePwd of the file /bin/httpd. The manipulation leads to stack-based buffer overflow. The attack may be initiated remotely. Multiple endpoints might be affected.https://patchthecve.com/cve/CVE-2026-5549.htmlhttps://patchthecve.com/cve/CVE-2026-5549.htmlFri, 24 Jul 2026 20:10:00 +0000MEDIUM 5.3: A vulnerability was determined in Tenda AC10 16.03.10.10_multi_TDE01. Affected by this issue is some unknown functionality of the file /webroot_ro/pem/privkeySrv.pem of the component RSA 2048-bit Private Key Handler. Executing a manipulation can lead to use of hard-coded cryptographic key . The atthttps://patchthecve.com/cve/CVE-2026-5548.htmlhttps://patchthecve.com/cve/CVE-2026-5548.htmlFri, 24 Jul 2026 20:10:00 +0000HIGH 8.8: A vulnerability was found in Tenda AC10 16.03.10.10_multi_TDE01. Affected by this vulnerability is the function fromSysToolChangePwd of the file /bin/httpd. Performing a manipulation of the argument sys.userpass results in stack-based buffer overflow. The attack can be initiated remotely.https://patchthecve.com/cve/CVE-2026-5547.htmlhttps://patchthecve.com/cve/CVE-2026-5547.htmlFri, 24 Jul 2026 20:10:00 +0000MEDIUM 6.3: A vulnerability has been found in Tenda AC10 16.03.10.10_multi_TDE01. Affected is the function formAddMacfilterRule of the file /bin/httpd. Such manipulation leads to os command injection. It is possible to launch the attack remotely. Multiple endpoints might be affected.