CVE-2025-57639 | Tenda AC9 1.0 formSetSambaConf usb.samba.guest.user os command injection

A vulnerability classified as critical was found in Tenda AC9 1.0. Affected is the function formSetSambaConf. Executing manipulation of the argument usb.samba.guest.user can lead to os command injection.

The identification of this vulnerability is CVE-2025-57639. The attack may be launched remotely. There is no exploit available.VulDB Recent EntriesRead More