EUVD-2026-60537

Buffer Overflow vulnerability in Tenda W20E V16.01.0.62782 allows an attacker to execute arbitrary code. This is an incomplete fix for CVE-2025-44867 and CVE-2026-36819...

CVE-2026-67967

CVE-2026-67967 affects Tenda W20E V5.0 firmware US_W20EV5.0qu_V16.01.0.6(2782). The /goform/module handler setFixTools.hostName passes user input to popen()-executed ping after filtering only ;, &, |, while setDhcpStaticBindList.bindMACAddr uses strcpy() with no length check on a binary lacking s...

CVE-2025-44867

Tenda W20E V15.11.0.6 was found to contain a command injection vulnerability in the formSetNetCheckTools function via the hostName parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...

CVE-2025-44867

Tenda W20E V15.11.0.6 was found to contain a command injection vulnerability in the formSetNetCheckTools function via the hostName parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...