CVE-2025-27129 is a critical authentication bypass vulnerability in the HTTP authentication functionality of Tenda AC6 router firmware version V5.0 V02.03.01.110. This flaw allows an attacker to send specially crafted HTTP requests that bypass authentication and potentially execute arbitrary code on the device. The vulnerability has a high CVSS score of 9.8, indicating severe impact on confidentiality, integrity, and availability.