A vulnerability was found in Tenda AC9 15.03.05.19. It has been declared as critical. This vulnerability affects unknown code of the file /goform/SetSambaCfg. The manipulation leads to command injection.
This vulnerability was named CVE-2025-22949. The attack can be initiated remotely. There is no exploit available.
