CVE-2026-24111

CVE-2026-24111 affects the Tenda W20E device (version V4.0br_V15.11.0.6). The issue arises when the value of the input parameter userInfo is passed to the function addAuthUser and is processed by sscanf without size validation, which can cause a buffer overflow. The public descriptions confirm th...