
Tenda AC20 16.03.08.12 – Command Injection
/* * Exploit Title : Tenda AC20 16.03.08.12 – Command Injection * Author : Byte Reaper * CVE : CVE-2025-9090 * Description: A vulnerability was identified in Tenda AC20 16.03.08.12. Affected is the function websFormDefine of the file /goform/telnet of the component Telnet Service. * target endpoint : /goform/telnet * place in service :…