https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-70644.htmlhttps://patchthecve.com/cve/CVE-2025-70644.htmlWed, 17 Jun 2026 10:03:21 +0000HIGH 7.5: Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the time parameter of the sub_60CFC function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.https://patchthecve.com/cve/CVE-2025-70650.htmlhttps://patchthecve.com/cve/CVE-2025-70650.htmlWed, 17 Jun 2026 10:03:21 +0000HIGH 7.5: Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the deviceList parameter of the formSetMacFilterCfg function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.https://patchthecve.com/cve/CVE-2025-70645.htmlhttps://patchthecve.com/cve/CVE-2025-70645.htmlWed, 17 Jun 2026 10:03:21 +0000HIGH 7.5: Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the deviceList parameter of the formSetWifiMacFilterCfg function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.https://patchthecve.com/cve/CVE-2025-71020.htmlhttps://patchthecve.com/cve/CVE-2025-71020.htmlWed, 17 Jun 2026 10:03:33 +0000HIGH 7.5: Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the security parameter of the sub_4C408 function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.https://patchthecve.com/cve/CVE-2025-70746.htmlhttps://patchthecve.com/cve/CVE-2025-70746.htmlWed, 17 Jun 2026 10:03:22 +0000HIGH 7.5: Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the timeZone parameter of the fromSetSysTime function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.https://patchthecve.com/cve/CVE-2025-70656.htmlhttps://patchthecve.com/cve/CVE-2025-70656.htmlWed, 17 Jun 2026 10:03:22 +0000HIGH 7.5: Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the mac parameter of the sub_65B5C function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.https://patchthecve.com/cve/CVE-2025-71019.htmlhttps://patchthecve.com/cve/CVE-2025-71019.htmlWed, 17 Jun 2026 10:03:33 +0000HIGH 7.5: Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the wanSpeed parameter of the sub_65B5C function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.https://patchthecve.com/cve/CVE-2025-70744.htmlhttps://patchthecve.com/cve/CVE-2025-70744.htmlWed, 17 Jun 2026 10:03:22 +0000HIGH 7.5: Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the cloneType parameter of the sub_65B5C function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.https://patchthecve.com/cve/CVE-2025-71021.htmlhttps://patchthecve.com/cve/CVE-2025-71021.htmlWed, 17 Jun 2026 10:03:33 +0000HIGH 7.5: Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the serverName parameter of the sub_65A28 function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.https://patchthecve.com/cve/CVE-2025-70747.htmlhttps://patchthecve.com/cve/CVE-2025-70747.htmlWed, 17 Jun 2026 10:03:22 +0000HIGH 7.5: Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the serviceName parameter of the sub_65A28 function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.https://patchthecve.com/cve/CVE-2025-70753.htmlhttps://patchthecve.com/cve/CVE-2025-70753.htmlWed, 17 Jun 2026 10:03:22 +0000HIGH 7.5: Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the security_5g parameter of the sub_4CA50 function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.https://patchthecve.com/cve/CVE-2024-44557.htmlhttps://patchthecve.com/cve/CVE-2024-44557.htmlWed, 17 Jun 2026 07:52:54 +0000CRITICAL 9.8: Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function setIptvInfo.https://patchthecve.com/cve/CVE-2024-44555.htmlhttps://patchthecve.com/cve/CVE-2024-44555.htmlWed, 17 Jun 2026 07:52:53 +0000CRITICAL 9.8: Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function setIptvInfo.https://patchthecve.com/cve/CVE-2024-44553.htmlhttps://patchthecve.com/cve/CVE-2024-44553.htmlWed, 17 Jun 2026 07:52:52 +0000CRITICAL 9.8: Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function formGetIptv.https://patchthecve.com/cve/CVE-2024-44552.htmlhttps://patchthecve.com/cve/CVE-2024-44552.htmlWed, 17 Jun 2026 07:52:52 +0000CRITICAL 9.8: Tenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function formGetIptv.https://patchthecve.com/cve/CVE-2024-44551.htmlhttps://patchthecve.com/cve/CVE-2024-44551.htmlWed, 17 Jun 2026 07:52:52 +0000CRITICAL 9.8: Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function formGetIptv.https://patchthecve.com/cve/CVE-2024-44550.htmlhttps://patchthecve.com/cve/CVE-2024-44550.htmlWed, 17 Jun 2026 07:52:52 +0000CRITICAL 9.8: Tenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function formGetIptv.https://patchthecve.com/cve/CVE-2024-44549.htmlhttps://patchthecve.com/cve/CVE-2024-44549.htmlWed, 17 Jun 2026 07:52:52 +0000CRITICAL 9.8: Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function formGetIptv.https://patchthecve.com/cve/CVE-2024-44558.htmlhttps://patchthecve.com/cve/CVE-2024-44558.htmlWed, 17 Jun 2026 07:52:54 +0000CRITICAL 9.8: Tenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function setIptvInfo.https://patchthecve.com/cve/CVE-2024-44556.htmlhttps://patchthecve.com/cve/CVE-2024-44556.htmlWed, 17 Jun 2026 07:52:54 +0000CRITICAL 9.8: Tenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function setIptvInfo.https://patchthecve.com/cve/CVE-2024-44565.htmlhttps://patchthecve.com/cve/CVE-2024-44565.htmlWed, 17 Jun 2026 07:52:54 +0000CRITICAL 9.8: Tenda AX1806 v1.0.0.1 contains a stack overflow via the serverName parameter in the function form_fast_setting_internet_set.https://patchthecve.com/cve/CVE-2024-44563.htmlhttps://patchthecve.com/cve/CVE-2024-44563.htmlWed, 17 Jun 2026 07:52:54 +0000CRITICAL 9.8: Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function setIptvInfo.https://patchthecve.com/cve/CVE-2024-41492.htmlhttps://patchthecve.com/cve/CVE-2024-41492.htmlWed, 17 Jun 2026 07:47:47 +0000HIGH 7.5: A stack overflow in Tenda AX1806 v1.0.0.1 allows attackers to cause a Denial of Service (DoS) via a crafted input.https://patchthecve.com/cve/CVE-2024-40416.htmlhttps://patchthecve.com/cve/CVE-2024-40416.htmlWed, 17 Jun 2026 07:45:51 +0000CRITICAL 9.8: A vulnerability in /goform/SetVirtualServerCfg in the sub_6320C function in Tenda AX1806 1.0.0.1 firmware leads to stack-based buffer overflow.https://patchthecve.com/cve/CVE-2024-40415.htmlhttps://patchthecve.com/cve/CVE-2024-40415.htmlWed, 17 Jun 2026 07:45:51 +0000CRITICAL 9.8: A vulnerability in /goform/SetStaticRouteCfg in the sub_519F4 function in Tenda AX1806 1.0.0.1 firmware leads to stack-based buffer overflow.https://patchthecve.com/cve/CVE-2024-40414.htmlhttps://patchthecve.com/cve/CVE-2024-40414.htmlWed, 17 Jun 2026 07:45:51 +0000CRITICAL 9.8: A vulnerability in /goform/SetNetControlList in the sub_656BC function in Tenda AX1806 1.0.0.1 firmware leads to stack-based buffer overflow.https://patchthecve.com/cve/CVE-2024-40417.htmlhttps://patchthecve.com/cve/CVE-2024-40417.htmlWed, 17 Jun 2026 07:45:51 +0000MEDIUM 6.5: A vulnerability was found in Tenda AX1806 1.0.0.1. Affected by this issue is the function formSetRebootTimer of the file /goform/SetIpMacBind. The manipulation of the argument list leads to stack-based buffer overflow.https://patchthecve.com/cve/CVE-2024-35580.htmlhttps://patchthecve.com/cve/CVE-2024-35580.htmlWed, 17 Jun 2026 07:35:03 +0000CRITICAL 9.8: Tenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function formSetIptv.https://patchthecve.com/cve/CVE-2024-35579.htmlhttps://patchthecve.com/cve/CVE-2024-35579.htmlWed, 17 Jun 2026 07:35:03 +0000HIGH 7.7: Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function formSetIptv.https://patchthecve.com/cve/CVE-2024-35578.htmlhttps://patchthecve.com/cve/CVE-2024-35578.htmlWed, 17 Jun 2026 07:35:02 +0000HIGH 8.0: Tenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function formSetIptv.https://patchthecve.com/cve/CVE-2024-35576.htmlhttps://patchthecve.com/cve/CVE-2024-35576.htmlWed, 17 Jun 2026 07:35:02 +0000MEDIUM 5.2: Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function formSetIptv.https://patchthecve.com/cve/CVE-2024-35571.htmlhttps://patchthecve.com/cve/CVE-2024-35571.htmlWed, 17 Jun 2026 07:35:02 +0000CRITICAL 9.8: Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function formSetIptv.https://patchthecve.com/cve/CVE-2024-4239.htmlhttps://patchthecve.com/cve/CVE-2024-4239.htmlWed, 17 Jun 2026 08:01:29 +0000HIGH 8.8: A vulnerability was found in Tenda AX1806 1.0.0.1 and classified as critical. Affected by this issue is the function formSetRebootTimer of the file /goform/SetRebootTimer. The manipulation of the argument rebootTime leads to stack-based buffer overflow. The attack may be launched remotely. The explohttps://patchthecve.com/cve/CVE-2024-4238.htmlhttps://patchthecve.com/cve/CVE-2024-4238.htmlWed, 17 Jun 2026 08:01:26 +0000HIGH 8.8: A vulnerability has been found in Tenda AX1806 1.0.0.1 and classified as critical. Affected by this vulnerability is the function formSetDeviceName of the file /goform/SetOnlineDevName. The manipulation of the argument devName leads to stack-based buffer overflow. The attack can be launched remotelyhttps://patchthecve.com/cve/CVE-2024-4237.htmlhttps://patchthecve.com/cve/CVE-2024-4237.htmlWed, 17 Jun 2026 08:01:25 +0000HIGH 8.8: A vulnerability, which was classified as critical, was found in Tenda AX1806 1.0.0.1. Affected is the function R7WebsSecurityHandler of the file /goform/execCommand. The manipulation of the argument password leads to stack-based buffer overflow. It is possible to launch the attack remotely. The expl