CVE-2025-11121 | Tenda AC18 15.03.05.19 /goform/AdvSetLanip lanIp command injection

September 27, 2025 Yanac

A vulnerability, which was classified as critical, has been found in Tenda AC18 15.03.05.19. The impacted element is an unknown function of the file /goform/AdvSetLanip. The manipulation of the argument lanIp leads to command injection.

This vulnerability is documented as CVE-2025-11121. The attack can be initiated remotely. Additionally, an exploit exists.VulDB Recent EntriesRead More