CVE-2025-11121: Tenda AC18 AdvSetLanip command injection

Published Sep 28, 2025

Updated

A security vulnerability has been detected in Tenda AC18 15.03.05.19. The impacted element is an unknown function of the file /goform/AdvSetLanip. The manipulation of the argument lanIp leads to command injection. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used.

Affected Software

3 affected components

Tenda Ac18

All of the following

Tenda Ac18 Firmware=15.03.05.19

Tenda Ac18

Event History

Sep 28, 2025

CVE Published

via MITRE·09:32 PM

Data Sourced

via MITRE·09:32 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·10:15 PM

DescriptionSeverityWeaknessAffected Software

Oct 9, 2026

Event

via NVD·10:02 AM

Frequently Asked Questions

What is the severity of CVE-2025-11121?

CVE-2025-11121 has a critical severity rating due to potential command injection vulnerabilities.

How do I fix CVE-2025-11121?

To fix CVE-2025-11121, update the Tenda AC18 firmware to the latest version provided by Tenda.

What is affected by CVE-2025-11121?

CVE-2025-11121 affects the Tenda AC18 router running firmware version 15.03.05.19.

Can CVE-2025-11121 be exploited remotely?

Yes, CVE-2025-11121 can be exploited remotely, allowing attackers to perform command injection.

What should I do if I am using a vulnerable version affected by CVE-2025-11121?

If using a vulnerable version affected by CVE-2025-11121, you should immediately update to the patched firmware to mitigate risks.