PT-2026-22601

Name of the Vulnerable Software and Affected Versions Tenda W20E version 4.0br V15.11.0.6 Description An issue exists in Tenda W20E firmware where improper input validation can lead to a buffer overflow. Attackers can exploit this by manipulating the userInfo variable. Specifically, when the...

CVE-2026-24111

CVE-2026-24111 affects the Tenda W20E device (version V4.0br_V15.11.0.6). The issue arises when the value of the input parameter userInfo is passed to the function addAuthUser and is processed by sscanf without size validation, which can cause a buffer overflow. The public descriptions confirm th...