CVE-2026-19823

A security flaw has been discovered in Tenda W20E 15.11.0.610681546841CNTDC. Impacted is the function formQOSRuleDel of the file /goform/delQos of the component QoS Rule Deletion. Performing a manipulation of the argument qosIndex results in stack-based buffer overflow. Remote exploitation of the...

CVE-2026-19823

The CVE-2026-19823 entry concerns Tenda W20E firmware version 15.11.0.6(1068_1546_841)_CN_TDC. The affected component is the QoS Rule Deletion functionality, specifically the formQOSRuleDel function in /goform/delQos. The root cause is a stack-based buffer overflow triggered by manipulating the q...

EUVD-2026-58622

A security flaw has been discovered in Tenda W20E 15.11.0.610681546841CNTDC. Impacted is the function formQOSRuleDel of the file /goform/delQos of the component QoS Rule Deletion. Performing a manipulation of the argument qosIndex results in stack-based buffer overflow. Remote exploitation of the...

Tenda W15E formQOSRuleDel Method Buffer Overflow Vulnerability

The Tenda W15E is a wireless router from Tenda, a Chinese company. A buffer overflow vulnerability exists in the Tenda W15E version 15.11.0.14, which is caused by the qosIndex parameter of the formQOSRuleDel method failing to correctly validate the length of the input data, and can be exploited b...

Tenda W15E 安全漏洞

The Tenda W15E is a wireless router from Tenda, a Chinese company. A buffer overflow vulnerability exists in the Tenda W15E version 15.11.0.14, which is caused by the qosIndex parameter of the formQOSRuleDel method failing to correctly validate the length of the input data, and can be exploited b...

Tenda G1 and G3 Buffer Overflow Vulnerability

The Tenda G1 and G3 are routers from the Chinese company Tenda. A buffer overflow vulnerability exists in the Tenda G1 and G3 routers that can be exploited by an attacker to execute arbitrary code via a crafted action qosIndex request...

CVE-2021-27705

Buffer Overflow in Tenda G1 and G3 routers with firmware v15.11.0.179502CN allows remote attackers to execute arbitrary code via a crafted action/"qosIndex "request. This occurs because the "formQOSRuleDel" function directly passes the parameter "qosIndex" to strcpy without limit...