CVE-2025-11523 | Tenda AC7 15.03.06.44 /goform/AdvSetLanip lanIp command injection

October 8, 2025 Yanac

A vulnerability was found in Tenda AC7 15.03.06.44 and classified as critical. This vulnerability affects unknown code of the file /goform/AdvSetLanip. The manipulation of the argument lanIp results in command injection.

This vulnerability is known as CVE-2025-11523. It is possible to launch the attack remotely. Furthermore, an exploit is available.VulDB Recent EntriesRead More