CVE-2025-68706

A stack-based buffer overflow vulnerability exists in the GoAhead-Webs HTTP daemon on KuWFi 4G LTE AC900 devices running firmware 1.0.13 . The /goform/formMultiApnSetting handler improperly uses sprintf() to copy a user-supplied pincode parameter into a fixed 132-byte stack buffer without perform...