CVE-2025-13258

None

CVSS

—

EPSS

0.8%

Published

Nov 17, 2025

CISA due date

—

The record

A vulnerability was detected in Tenda AC20 up to 16.03.08.12. The impacted element is an unknown function of the file /goform/WifiExtraSet. The manipulation of the argument wpapsk_crypto results in buffer overflow. The attack can be launched remotely. The exploit is now public and may be used.

Affected packages

Ecosystem	Package	Introduced	Fixed