Denial of Service Vulnerability in Tenda AC6 Router

CVE-2025-30256

What is CVE-2025-30256?

A denial of service vulnerability is present in the HTTP Header Parsing component of the Tenda AC6 router. When exploited, this flaw permits an adversary to disrupt the operation of the device through a series of specially constructed HTTP requests, which can lead to the router rebooting. Attackers can leverage this vulnerability by sending multiple crafted network packets, effectively causing an outage for users reliant on the affected device.

References