CVE-2026-51846: Undefined Security Weakness

In Tenda AC7 v15.03.06.44, the wanSpeed parameter of the route /goform/AdvSetMacMtuWan has a stack buffer overflow vulnerability that can lead to remote arbitrary code execution...

CVE-2026-51843

Tenda AC7 v15.03.06.44 contains a stack buffer overflow vulnerability in the /goform/AdvSetMacMtuWan interface via the wanMTU parameter...

PT-2026-50968

Name of the Vulnerable Software and Affected Versions Tenda AC7 version 15.03.06.44 Description A stack buffer overflow occurs in the '/goform/AdvSetMacMtuWan' endpoint through the mac parameter. A stack buffer overflow is a condition where a program writes more data to a buffer located on the...

CVE-2026-51844: Undefined Security Weakness

Tenda AC7 v15.03.06.44 contains a stack buffer overflow vulnerability in the /goform/AdvSetMacMtuWan interface via the cloneType parameter...

CVE-2026-51845: Undefined Security Weakness

Tenda AC7 v15.03.06.44 contains a stack buffer overflow vulnerability in the /goform/AdvSetMacMtuWan interface via the mac parameter...

CVE-2026-51845

Tenda AC7 v15.03.06.44 contains a stack buffer overflow vulnerability in the /goform/AdvSetMacMtuWan interface via the mac parameter...

CVE-2026-1637

A vulnerability was identified in Tenda AC21 16.03.08.16. The affected element is the function fromAdvSetMacMtuWan of the file /goform/AdvSetMacMtuWan. The manipulation leads to stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit is publicly available and might...

CVE-2025-67074

A Buffer overflow vulnerability in function fromAdvSetMacMtuWan of bin httpd in Tenda AC10V4.0 V16.03.10.20 allows remote attackers to cause denial of service and possibly code execution by sending a post request with a crafted payload field serverName to /goform/AdvSetMacMtuWan...

CVE-2025-67073

A Buffer overflow vulnerability in function fromAdvSetMacMtuWan of bin httpd in Tenda AC10V4.0 V16.03.10.20 allows remote attackers to cause denial of service and possibly code execution by sending a post request with a crafted payload field serviceName to /goform/AdvSetMacMtuWan...

CVE-2025-67073

A Buffer overflow vulnerability in function fromAdvSetMacMtuWan of bin httpd in Tenda AC10V4.0 V16.03.10.20 allows remote attackers to cause denial of service and possibly code execution by sending a post request with a crafted payload field serviceName to /goform/AdvSetMacMtuWan...

CVE-2025-67074: Buffer Copy without Checking Size of Input

A Buffer overflow vulnerability in function fromAdvSetMacMtuWan of bin httpd in Tenda AC10V4.0 V16.03.10.20 allows remote attackers to cause denial of service and possibly code execution by sending a post request with a crafted payload field serverName to /goform/AdvSetMacMtuWan...

CVE-2025-29387

In Tenda AC9 v1.0 V15.03.05.14multi, the wanSpeed parameter of /goform/AdvSetMacMtuWan has a stack overflow vulnerability, which can lead to remote arbitrary code execution...

CVE-2025-29387: Out-of-bounds Write

In Tenda AC9 v1.0 V15.03.05.14multi, the wanSpeed parameter of /goform/AdvSetMacMtuWan has a stack overflow vulnerability, which can lead to remote arbitrary code execution...

PT-2025-11285

Name of the Vulnerable Software and Affected Versions: Tenda AC9 version 1.0 V15.03.05.14 multi Description: The issue is related to a stack overflow vulnerability in the mac parameter of the "/goform/AdvSetMacMtuWan" API endpoint. This vulnerability can lead to remote arbitrary code execution...

PT-2025-11284

Name of the Vulnerable Software and Affected Versions: Tenda AC9 version 1.0 V15.03.05.14 multi Description: The issue is related to a stack overflow vulnerability in the cloneType parameter of the "/goform/AdvSetMacMtuWan" API endpoint, which can lead to remote arbitrary code execution...

PT-2025-11286

Name of the Vulnerable Software and Affected Versions: Tenda AC9 version 1.0 V15.03.05.14 multi Description: The issue is related to a stack overflow vulnerability in the wanSpeed parameter of the "/goform/AdvSetMacMtuWan" API endpoint. This vulnerability can lead to remote arbitrary code...

PT-2025-11283

Name of the Vulnerable Software and Affected Versions: Tenda AC9 version 1.0 V15.03.05.14 multi Description: The issue is related to a stack overflow vulnerability in the wanMTU parameter of the "/goform/AdvSetMacMtuWan" API endpoint. This vulnerability can lead to remote arbitrary code execution...

CVE-2024-4066 Tenda AC8 AdvSetMacMtuWan fromAdvSetMacMtuWan stack-based overflow

A vulnerability classified as critical has been found in Tenda AC8 16.03.34.09. Affected is the function fromAdvSetMacMtuWan of the file /goform/AdvSetMacMtuWan. The manipulation of the argument wanMTU/wanSpeed/cloneType/mac/serviceName/serverName leads to stack-based buffer overflow. It is...

PT-2024-6578

Name of the Vulnerable Software and Affected Versions: Tenda AX1803 version 1.0.0.1 Description: The issue is related to a stack overflow in the fromAdvSetMacMtuWan function, specifically via the serviceName parameter. This can be exploited by sending specially crafted POST requests to the...