https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-0581.htmlhttps://patchthecve.com/cve/CVE-2026-0581.htmlWed, 17 Jun 2026 10:10:59 +0000MEDIUM 6.3: A vulnerability was determined in Tenda AC1206 15.03.06.23. Affected by this issue is the function formBehaviorManager of the file /goform/BehaviorManager of the component httpd. Executing a manipulation of the argument modulename/option/data/switch can lead to command injection. The attack can be lhttps://patchthecve.com/cve/CVE-2025-10432.htmlhttps://patchthecve.com/cve/CVE-2025-10432.htmlWed, 17 Jun 2026 08:28:19 +0000CRITICAL 9.8: A vulnerability was found in Tenda AC1206 15.03.06.23. This vulnerability affects the function check_param_changed of the file /goform/AdvSetMacMtuWa of the component HTTP Request Handler. Performing manipulation of the argument wanMTU results in stack-based buffer overflow. Remote exploitation of thttps://patchthecve.com/cve/CVE-2025-9523.htmlhttps://patchthecve.com/cve/CVE-2025-9523.htmlWed, 17 Jun 2026 10:09:09 +0000CRITICAL 9.8: A vulnerability was detected in Tenda AC1206 15.03.06.23. Affected is the function GetParentControlInfo of the file /goform/GetParentControlInfo. The manipulation of the argument mac results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit is now public and mhttps://patchthecve.com/cve/CVE-2025-7544.htmlhttps://patchthecve.com/cve/CVE-2025-7544.htmlWed, 17 Jun 2026 10:05:11 +0000HIGH 8.8: A vulnerability was found in Tenda AC1206 15.03.06.23. It has been rated as critical. This issue affects the function formSetMacFilterCfg of the file /goform/setMacFilterCfg. The manipulation of the argument deviceList leads to stack-based buffer overflow. The attack may be initiated remotely. The ehttps://patchthecve.com/cve/CVE-2025-4299.htmlhttps://patchthecve.com/cve/CVE-2025-4299.htmlWed, 17 Jun 2026 09:32:58 +0000HIGH 8.8: A vulnerability was found in Tenda AC1206 up to 15.03.06.23. It has been rated as critical. This issue affects the function setSchedWifi of the file /goform/openSchedWifi. The manipulation leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public anhttps://patchthecve.com/cve/CVE-2025-4298.htmlhttps://patchthecve.com/cve/CVE-2025-4298.htmlWed, 17 Jun 2026 09:32:58 +0000HIGH 8.8: A vulnerability was found in Tenda AC1206 up to 15.03.06.23. It has been declared as critical. This vulnerability affects the function formSetCfm of the file /goform/setcfm. The manipulation leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public https://patchthecve.com/cve/CVE-2025-3328.htmlhttps://patchthecve.com/cve/CVE-2025-3328.htmlWed, 17 Jun 2026 09:19:40 +0000HIGH 8.8: A vulnerability was found in Tenda AC1206 15.03.06.23. It has been classified as critical. Affected is the function form_fast_setting_wifi_set of the file /goform/fast_setting_wifi_set. The manipulation of the argument ssid/timeZone leads to buffer overflow. It is possible to launch the attack remothttps://patchthecve.com/cve/CVE-2024-10434.htmlhttps://patchthecve.com/cve/CVE-2024-10434.htmlWed, 17 Jun 2026 06:55:39 +0000HIGH 8.8: A vulnerability was found in Tenda AC1206 up to 20241027. It has been classified as critical. This affects the function ate_Tenda_mfg_check_usb/ate_Tenda_mfg_check_usb3 of the file /goform/ate. The manipulation of the argument arg leads to stack-based buffer overflow. It is possible to initiate the https://patchthecve.com/cve/CVE-2024-9793.htmlhttps://patchthecve.com/cve/CVE-2024-9793.htmlWed, 17 Jun 2026 08:25:16 +0000MEDIUM 6.3: A vulnerability classified as critical was found in Tenda AC1206 up to 15.03.06.23. This vulnerability affects the function ate_iwpriv_set/ate_ifconfig_set of the file /goform/ate. The manipulation leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to th