← Database

CVE-2025-44872

CRITICAL CVSS: 9.8 Published: 2025-05-02 Modified: 2026-06-17

Description

Tenda AC9 V15.03.06.42_multi was found to contain a command injection vulnerability in the formsetUsbUnload function via the deviceName parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.

Affected Platforms

Tenda Ac9 FirmwareTenda Ac9

Weakness Type

CWE-77

References