Critical severity9.8NVD Advisory· Published Oct 29, 2018· Updated Jun 17, 2026
CVE-2018-18728
CVE-2018-18728
Description
An issue was discovered on Tenda AC9 V15.03.05.19(6318)_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices. They allow remote code execution via shell metacharacters in the usbName field to the __fastcall function with a POST request.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
6- cpe:2.3:o:tenda:ac15_firmware:15.03.05.19_cn:*:*:*:*:*:*:*
- cpe:2.3:o:tenda:ac18_firmware:15.03.05.19\(6318\)_cn:*:*:*:*:*:*:*
- cpe:2.3:o:tenda:ac9_firmware:15.03.05.19\(6318\)_cn:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
1- github.com/ZIllR0/Routers/blob/master/Tenda/rce1.mdnvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.