Authentication Bypass in Tenda AC6 Router

CVE-2025-27129

What is CVE-2025-27129?

An authentication bypass vulnerability in the HTTP authentication mechanism of the Tenda AC6 router allows attackers to craft specific HTTP requests that can lead to arbitrary code execution. By sending specially structured packets, an attacker can exploit this weakness, potentially compromising the affected devices and enabling unauthorized access.

References