CVE List

CVE-2025-27129

Severe 9.8

An authentication bypass vulnerability exists in the HTTP authentication functionality of Tenda AC6 V5.0 V02.03.01.110. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can send packets to trigger this vulnerability.

Published August 20, 2025.

Affected software

Get alerts for Tenda Ac6 Firmware

Reference links