Tenda AC6 stack buffer overflow vulnerability (CNVD-2026-38722)

The Tenda AC6 is a dual-band gigabit wireless router launched by Tenda. The Tenda AC6 has a stack buffer overflow vulnerability, which stems from the lack of size checking in the /goform/WifiWpsStart module. Attackers can exploit this vulnerability to cause a denial-of-service attack...

CVE-2024-2896

CVE-2024-2896 affects Tenda AC7 firmware 15.03.06.44, impacting the function formWifiWpsStart in /goform/WifiWpsStart. The issue is a stack-based buffer overflow caused by manipulation of the index argument, allowing potential remote exploitation. Public exploit details exist, and advisories note...