CVE-2026-5548
A vulnerability was found in Tenda AC10 16.03.10.10_multi_TDE01.
Published Apr 5, 2026 · updated Jul 24, 2026 · tenda ac10 firmware
A vulnerability was found in Tenda AC10 16.03.10.10_multi_TDE01. Affected by this vulnerability is the function fromSysToolChangePwd of the file /bin/httpd. Performing a manipulation of the argument sys.userpass results in stack-based buffer overflow. The attack can be initiated remotely.
Code
The project this record applies to. Exploit listings stay in References.
Timeline
Detection, updates, and resolution for this record.
Apr 5, 2026 · NIST NVD
Detected
A vulnerability was found in Tenda AC10 16.03.10.10_multi_TDE01. Affected by this vulnerability is the function fromSysToolChangePwd of the file /bin/httpd. Performing a manipulation of the argument sys.userpass results in stack-based buffer overflow. The attack can be initiated remotely.
Jul 24, 2026 · NIST NVD
Updated
A vulnerability was found in Tenda AC10 16.03.10.10_multi_TDE01. Affected by this vulnerability is the function fromSysToolChangePwd of the file /bin/httpd. Performing a manipulation of the argument sys.userpass results in stack-based buffer overflow. The attack can be initiated remotely.
Affected
- cpe tenda/ac10 firmware16.03.10.10_multi_tde01
Sources
- CVE.orgVulnerability recordCVE-2026-5548
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2026-5548
A vulnerability was found in Tenda AC10 16.03.10.10_multi_TDE01. Affected by this vulnerability is the function fromSysToolChangePwd of the file /bin/httpd. Performing a manipulation of the argument sys.userpass results in stack-based buffer overflow. The attack can be initiated
nvd.nist.gov