CVE-2025-9791

A weakness has been identified in Tenda AC20 16.03.08.05. This vulnerability affects unknown code of the file /goform/fromAdvSetMacMtuWan. This manipulation of the argument wanMTU causes stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be exploited.

• CWE-119
• CWE-121
• CWE-787

• https://github.com/Cpppq43/Tenda/blob/main/Tenda_AC20_V16.03.08.05.mdExploit, Third Party Advisory
• https://github.com/Cpppq43/Tenda/blob/main/Tenda_AC20_V16.03.08.05.md#pocExploit, Third Party Advisory
• https://vuldb.com/?ctiid.322106Permissions Required, VDB Entry
• https://vuldb.com/?id.322106Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.641088Third Party Advisory, VDB Entry
• https://www.tenda.com.cn/Product
• https://github.com/Cpppq43/Tenda/blob/main/Tenda_AC20_V16.03.08.05.mdExploit, Third Party Advisory
• https://github.com/Cpppq43/Tenda/blob/main/Tenda_AC20_V16.03.08.05.md#pocExploit, Third Party Advisory

Published

Sep 1, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-9785PaperCut Print Deploy is an optional component that integrat…7.7
• CVE-2025-9786A vulnerability was found in Campcodes Online Learning Manag…9.8
• CVE-2025-9787Zohocorp ManageEngine Applications Manager versions 177400 a…6.1
• CVE-2025-9788A vulnerability was determined in SourceCodester/Campcodes S…9.8
• CVE-2025-9789A vulnerability was identified in SourceCodester Online Hote…9.8
• CVE-2025-9790A security flaw has been discovered in SourceCodester Hotel …9.8
• CVE-2025-9792A security vulnerability has been detected in itsourcecode A…9.8
• CVE-2025-9793A vulnerability was detected in itsourcecode Apartment Manag…9.8
• CVE-2025-9794A flaw has been found in Campcodes Computer Sales and Invent…9.8
• CVE-2025-9795A vulnerability has been found in xujeff tianti 天梯 up to 2.3…5.4
• CVE-2025-9796A vulnerability was found in thinkgem JeeSite up to 5.12.1. …4.1
• CVE-2025-9797A vulnerability was determined in mrvautin expressCart up to…2.4