CVE-2025-10432

The CVE-2025-10432 entry concerns Tenda AC1206 firmware 15.03.06.23. The vulnerability is in the HTTP Request Handler’s check_param_changed function, located in /goform/AdvSetMacMtuWa, where manipulating the wanMTU parameter triggers a stack-based buffer overflow. Remote exploitation is possible ...