CVE-2025-27129
published 2025-08-20CVE-2025-27129: An authentication bypass vulnerability exists in the HTTP authentication functionality of Tenda AC6 V5.0 V02.03.01.110. A specially crafted HTTP request can…
critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
An authentication bypass vulnerability exists in the HTTP authentication functionality of Tenda AC6 V5.0 V02.03.01.110. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can send packets to trigger this vulnerability.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| craftcms | cms | >= 3.5.0 < 4.16.19 | 4.16.19 |
| craftcms | cms | >= 5.0.0-RC1 < 5.8.23 | 5.8.23 |
| tenda | ac6_firmware | — | — |
| tenda | ac6_v5.0 | — | — |
CVSS provenance
nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
ghsa5.0MEDIUM