CVE-2026-43829

A stack-based buffer overflow vulnerability in the password functionality could allow an unauthenticated attacker to achieve code execution when the SafeEnhancement feature is enabled...

CVE-2026-43833

Full details and mitigation steps are currently restricted and will be published at a later date...

CVE-2026-43833

A stack-based buffer overflow vulnerability exists in the upload functionality of an unspecified software product. This flaw allows an authenticated attacker to achieve code execution by providing input that exceeds the allocated buffer size on the stack, potentially overwriting adjacent memory. ...

EUVD-2026-51389

Full details and mitigation steps are currently restricted and will be published at a later date...

CVE-2026-43832

Full details and mitigation steps are currently restricted and will be published at a later date...

CVE-2026-43832

A stack-based buffer overflow vulnerability in the Cookie parsing methods could allow an unauthenticated attacker to achieve code execution when the SafeEnhancement feature is enabled...

CVE-2026-43831

A stack-based buffer overflow vulnerability in the log message functionality could allow an unauthenticated attacker to achieve code execution...

CVE-2026-43831

Full details and mitigation steps are currently restricted and will be published at a later date...

CVE-2026-43829

A stack-based buffer overflow vulnerability exists in the password functionality of the affected software. If the SafeEnhancement feature is enabled, an unauthenticated attacker can exploit this flaw to achieve code execution . No specific vendor, version, or remediation steps are provided in the...

CVE-2026-43829

Full details and mitigation steps are currently restricted and will be published at a later date...

CVE-2026-43829

A stack-based buffer overflow vulnerability in the password functionality could allow an unauthenticated attacker to achieve code execution when the SafeEnhancement feature is enabled...

EUVD-2026-51385

Full details and mitigation steps are currently restricted and will be published at a later date...

PT-2026-66673

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description An unauthenticated attacker can exploit a stack-based buffer overflow—a condition where a program writes more data to a buffer located on the stack than the...

CVE-2026-67822

Tenda W6-S 1.0.0.4510 contains a stack-based buffer overflow vulnerability in the /goform/wifiSSIDset endpoint. The function formwrlSSIDset uses sprintf to copy user-controlled 'GO' and 'index' parameters into a 64-byte stack buffer without length restriction, leading to stack overflow...

CVE-2026-67822

Tenda W6-S 1.0.0.4510 contains a stack-based buffer overflow vulnerability in the /goform/wifiSSIDset endpoint. The function formwrlSSIDset uses sprintf to copy user-controlled 'GO' and 'index' parameters into a 64-byte stack buffer without length restriction, leading to stack overflow...

CVE-2026-67822

The Tenda W6-S wireless access point (firmware v1.0.0.4(510) ) is vulnerable to a stack-based buffer overflow in the formwrlSSIDset() function, which handles the /goform/wifiSSIDset endpoint. The root cause is the use of sprintf to copy user-controlled GO and index parameters into a fixed 64-byte...

PT-2026-66674

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description An unauthenticated attacker can exploit a stack-based buffer overflow—a condition where a program writes more data to a buffer located on the stack than it can...

CVE-2026-67822: Stack-based Buffer Overflow

Tenda W6-S 1.0.0.4510 contains a stack-based buffer overflow vulnerability in the /goform/wifiSSIDset endpoint. The function formwrlSSIDset uses sprintf to copy user-controlled 'GO' and 'index' parameters into a 64-byte stack buffer without length restriction, leading to stack overflow...

EUVD-2026-51587

Tenda W6-S 1.0.0.4510 contains a stack-based buffer overflow vulnerability in the /goform/wifiSSIDset endpoint. The function formwrlSSIDset uses sprintf to copy user-controlled 'GO' and 'index' parameters into a 64-byte stack buffer without length restriction, leading to stack overflow...

CVE-2026-67822

Tenda W6-S 1.0.0.4510 contains a stack-based buffer overflow vulnerability in the /goform/wifiSSIDset endpoint. The function formwrlSSIDset uses sprintf to copy user-controlled 'GO' and 'index' parameters into a 64-byte stack buffer without length restriction, leading to stack overflow...