Findings

CVE-2026-5550

A vulnerability was identified in Tenda AC10 16.03.10.10_multi_TDE01.

Published Apr 5, 2026 · updated Jul 24, 2026 · tenda ac10 firmware

A vulnerability was identified in Tenda AC10 16.03.10.10_multi_TDE01. This affects the function fromSysToolChangePwd of the file /bin/httpd. The manipulation leads to stack-based buffer overflow. The attack may be initiated remotely. Multiple endpoints might be affected.

Code

The project this record applies to. Exploit listings stay in References.

Timeline

Detection, updates, and resolution for this record.

  1. Apr 5, 2026 · NIST NVD

    Detected

    A vulnerability was identified in Tenda AC10 16.03.10.10_multi_TDE01. This affects the function fromSysToolChangePwd of the file /bin/httpd. The manipulation leads to stack-based buffer overflow. The attack may be initiated remotely. Multiple endpoints might be affected.

  2. Jul 24, 2026 · NIST NVD

    Updated

    A vulnerability was identified in Tenda AC10 16.03.10.10_multi_TDE01. This affects the function fromSysToolChangePwd of the file /bin/httpd. The manipulation leads to stack-based buffer overflow. The attack may be initiated remotely. Multiple endpoints might be affected.

Affected

  • cpe tenda/ac10 firmware16.03.10.10_multi_tde01

Sources

  • CVE.orgVulnerability recordCVE-2026-5550

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-5550

    A vulnerability was identified in Tenda AC10 16.03.10.10_multi_TDE01. This affects the function fromSysToolChangePwd of the file /bin/httpd. The manipulation leads to stack-based buffer overflow. The attack may be initiated remotely. Multiple endpoints might be affected.

    nvd.nist.gov

References