CVE-2024-2851

creationtimestamp| type| source ---|---|--- 2026-09-10 11:00:46+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/64394a9a-b4a1-4a61-ba7b-af896277501e...

CVE-2024-2851

A critical OS command injection vulnerability exists in the Tenda AC15 router, specifically affecting versions 15.03.05.18 through 15.03.20_multi . The flaw is located in the formSetSambaConf function within the /goform/setsambacfg endpoint. It is caused by a failure to properly sanitize or filte...