The vulnerability of the /goform/saveAutoQos function in the microprogramming router Tenda AC15 allows a attacker to execute arbitrary code.

The vulnerability of the /goform/saveAutoQos microprogramming system for Tenda AC15 routers lies in the fact that the operation’s output goes beyond the buffer in memory when processing the enable parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2025-11389

A security flaw has been discovered in Tenda AC15 15.03.05.18. Affected is an unknown function of the file /goform/saveAutoQos. Performing a manipulation of the argument enable results in stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been released to...

The vulnerability of the /goform/saveAutoQos software for Tenda AC18 routers allows a attacker to cause a service failure.

The vulnerability of the /goform/saveAutoQos microprogramming system for Tenda AC18 routers lies in the fact that the write operation exceeds the buffer limits. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

CVE-2025-11123

A flaw has been found in Tenda AC18 15.03.05.19. This impacts an unknown function of the file /goform/saveAutoQos. This manipulation of the argument enable causes stack-based buffer overflow. The attack may be initiated remotely. The exploit has been published and may be used...

CVE-2025-11123 Tenda AC18 saveAutoQos stack-based overflow

A flaw has been found in Tenda AC18 15.03.05.19. This impacts an unknown function of the file /goform/saveAutoQos. This manipulation of the argument enable causes stack-based buffer overflow. The attack may be initiated remotely. The exploit has been published and may be used...