CVE-2026-24105

The Tenda AC15V1.0 wireless router is vulnerable to a command injection flaw in the goform/formsetUsbUnload component. The root cause is the lack of validation for the v1 parameter, which is subsequently passed to the doSystemCmd function. An attacker could exploit this to execute arbitrary comma...