← Back to browse · API

CVE-2025-22949

Severity

CRITICAL

CVSS

9.8

EPSS

0.01929

Risk score

39.88

CISA KEV

No

PoC

No

Published

2025-01-10

Modified

2025-01-14

First seen

2026-08-07

Aliases

EUVD-2025-3052, GHSA-HW79-CP29-3X6C

Products

n/a:n/a n/a

Sources

euvd EUVD-2025-3052

Description

Tenda ac9 v1.0 firmware v15.03.05.19 is vulnerable to command injection in /goform/SetSambaCfg, which may lead to remote arbitrary code execution.

References