CVE-2025-65220

The Tenda AC21 router (version 16.03.08.16 ) is vulnerable to a stack-based buffer overflow in the httpd-demon service. The flaw exists in the /goform/SetVirtualServerCfg API endpoint because the application fails to properly validate the length and size of the list parameter. A remote attacker c...