CVE-2025-11120

CVE-2025-11120 affects Tenda AC8 with firmware 16.03.34.06. The vulnerability is in the formSetServerConfig function of /goform/SetServerConfig, where input boundary checking is insufficient, enabling a remote buffer overflow. An exploit has been publicly disclosed. Multiple feeds confirm the iss...