CVE Vulnerabilities

CVE-2025-27129

Authentication Bypass Using an Alternate Path or Channel

Published: Aug 20, 2025 | Modified: Aug 21, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

An authentication bypass vulnerability exists in the HTTP authentication functionality of Tenda AC6 V5.0 V02.03.01.110. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can send packets to trigger this vulnerability.

Weakness

The product requires authentication, but the product has an alternate path or channel that does not require authentication.

Affected Software

Name Vendor Start Version End Version
Ac6_firmware Tenda 02.03.01.110 (including) 02.03.01.110 (including)

Potential Mitigations

References