EUVD-2026-58599

A security flaw has been discovered in TOTOLINK A800R 4.1.2cu.5137B20200730. The impacted element is the function setIpQosRules of the file /cgi-bin/cstecgi.cgi of the component firewall.so. The manipulation of the argument Comment results in stack-based buffer overflow. The attack can be execute...

CVE-2026-19811

A security flaw has been discovered in TOTOLINK A800R 4.1.2cu.5137B20200730. The impacted element is the function setIpQosRules of the file /cgi-bin/cstecgi.cgi of the component firewall.so. The manipulation of the argument Comment results in stack-based buffer overflow. The attack can be execute...

CVE-2026-19791

A weakness has been identified in Tenda G0 up to 20260625. The affected element is the function addStaticRoute of the file /goform/module of the component httpd web management interface. Executing a manipulation of the argument staticRouteNet can lead to stack-based buffer overflow. The attack ma...

CVE-2026-19789

A vulnerability was determined in Tenda AC1206 15.03.06.23multiTD01. This vulnerability affects the function setwlguestiplist of the file /goform/WifiGuestSet of the component httpd web management interface. This manipulation of the argument shareSpeed causes stack-based buffer overflow. Remote...

CVE-2026-19788

A vulnerability was found in Tenda AC1206 15.03.06.23multiTD01. This affects the function setdevicename of the file /goform/SetOnlineDevName of the component httpd web management interface. The manipulation of the argument devName results in stack-based buffer overflow. The attack may be launched...

EUVD-2026-58584

A weakness has been identified in Tenda G0 up to 20260625. The affected element is the function addStaticRoute of the file /goform/module of the component httpd web management interface. Executing a manipulation of the argument staticRouteNet can lead to stack-based buffer overflow. The attack ma...

CVE-2026-19791 Tenda G0 httpd web management interface module addStaticRoute stack-based overflow

A weakness has been identified in Tenda G0 up to 20260625. The affected element is the function addStaticRoute of the file /goform/module of the component httpd web management interface. Executing a manipulation of the argument staticRouteNet can lead to stack-based buffer overflow. The attack ma...

CVE-2026-19791

CVE-2026-19791 – Tenda G0 httpd web management interface : A stack-based buffer overflow in the addStaticRoute function (file /goform/module) of the httpd web management interface. By manipulating the staticRouteNet argument, remote attackers could overflow the stack. Exploitation is possible rem...

EUVD-2026-58575

A vulnerability was identified in Tenda G0 up to 20260625. This issue affects the function formSetPortMirror of the file /goform/module of the component httpd Web Management Interface. Such manipulation of the argument portMirrorMirroredPorts leads to stack-based buffer overflow. The attack can b...

CVE-2026-19790

Tenda G0 devices with the httpd Web Management Interface are affected. The vulnerability lies in the formSetPortMirror function (in /goform/module), where manipulating the portMirrorMirroredPorts argument causes a stack-based overflow. This can be triggered remotely and has publicly available exp...

CVE-2026-19789

The vulnerability CVE-2026-19789 affects Tenda AC1206 devices running 15.03.06.23_multi_TD01, specifically the httpd web management interface’s /goform/WifiGuestSet function set_wl_guest_iplist. Manipulating the argument shareSpeed triggers a stack-based buffer overflow, leading to remote code ex...

EUVD-2026-58573

A vulnerability was found in Tenda AC1206 15.03.06.23multiTD01. This affects the function setdevicename of the file /goform/SetOnlineDevName of the component httpd web management interface. The manipulation of the argument devName results in stack-based buffer overflow. The attack may be launched...

CVE-2026-19788

This CVE affects Tenda AC1206 running 15.03.06.23_multi_TD01. The vulnerability resides in the httpd web management interface, specifically the SetOnlineDevName function (/goform/SetOnlineDevName). User-controlled argument devName triggers a stack-based buffer overflow, permitting a remote attack...

CVE-2026-18511

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to generate a stack-based buffer overflow in the Native IBM i JSSE provider, caused by improper bounds checking during TLS session establishment. A local attacker could overflow a fixed-length buffer and execute arbitrary cod...

CVE-2026-18077

CVE-2026-18077 affects IBM i versions 7.3–7.6 and is described as a remote denial-of-service caused by a stack-based buffer overflow in SMTP handling. The CVSS v3.1 base score is 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). IBM’s bulletin lists fixes per release: 7.6 — SJ11061 and SJ11131; 7.5 — SJ...

EUVD-2026-58464

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to a stack-based buffer overflow...

CVE-2026-16692

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to cause a denial of service due to a stack-based buffer overflow...

CVE-2026-16815

IBM i 7.3–7.6 is affected by CVE-2026-16815 via a stack-based buffer overflow in Simple Mail Transfer Protocol handling, allowing a remote attacker over the network to cause denial of service and potentially access sensitive information. The vulnerability affects IBM i releases 7.3, 7.4, 7.5, and...

CVE-2026-16815 IBM i is Affected By Multiple Vulnerabilities in Simple Mail Transfer Protocol

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service and potentially obtain sensitive information due to a stack-based buffer overflow...

CVE-2026-16692

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to cause a denial of service due to a stack-based buffer overflow...