A vulnerability was found in Tenda AC9 15.03.05.14_multi. It has been rated as problematic. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/DownloadCfg.jpg of the component Configuration File Handler. This manipulation causes information disclosure.

This vulnerability appears as CVE-2025-14286. The attack may be initiated remotely. In addition, an exploit is available.

It is advisable to implement restrictive firewalling.