PT-2026-31339

Name of the Vulnerable Software and Affected Versions Tenda AC6 version 15.03.05.16 multi Description A buffer overflow exists in the formSetCfm function. This issue can be triggered through the funcname, funcpara1, and funcpara2 parameters. Recommendations At the moment, there is no information...

PT-2026-28667

Name of the Vulnerable Software and Affected Versions Tenda AC5 version 15.03.06.47 Description A flaw exists in the Tenda AC5 version 15.03.06.47. This issue is located within the formSetCfm function of the /goform/setcfm file, part of the POST Request Handler component. Manipulation of the...

CVE-2026-3677 Tenda FH451 setcfm fromSetCfm stack-based overflow

A vulnerability was found in Tenda FH451 1.0.0.9. This impacts the function fromSetCfm of the file /goform/setcfm. The manipulation of the argument funcname/funcpara1 results in stack-based buffer overflow. The attack may be performed from remote. The exploit has been made public and could be use...

Tenda FH451 安全漏洞

The Tenda FH451 is a router produced by the Chinese company Tenda. Version 1.0.0.9 of the Tenda FH451 contains a security vulnerability. This vulnerability stems from incorrect handling of parameters funcname/funcpara1 in the file/goform/setcfm, which may lead to a stack buffer overflow...

CVE-2024-34942

Tenda FH1206 V1.2.0.88155EN was discovered to contain a stack-based buffer overflow vulnerability via the funcpara1 parameter at ip/goform/exeCommand...

CVE-2024-41465

Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the funcpara1 parameter at ip/goform/setcfm...

EUVD-2024-35118

Malicious code in bioql PyPI...

EUVD-2024-53627

Malicious code in bioql PyPI...

CVE-2024-33212

Tenda FH1206 V1.2.0.88155EN was discovered to contain a stack-based buffer overflow vulnerability via the funcpara1 parameter in ip/goform/setcfm...

CVE-2024-30635

Tenda F1202 v1.2.0.20408 has a stack overflow vulnerability located in the funcpara1 parameter in the formSetCfm function...

CVE-2024-57578

Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the funcpara1 parameter in the formSetCfm function...

CVE-2025-28220

Tenda W6S v1.0.0.4510 has a Buffer Overflow vulnerability in the setcfm function, which allows remote attackers to cause web server crash via parameter funcpara1 passed to the binary through a POST request...

CVE-2025-25678

Tenda i12 V1.0.0.103805 was discovered to contain a buffer overflow via the funcpara1 parameter in the formSetCfm function...

PT-2025-7569 · Tenda · Tenda I12

Name of the Vulnerable Software and Affected Versions: Tenda i12 version 1.0.0.103805 Description: A buffer overflow issue was discovered in the formSetCfm function via the funcpara1 parameter. Recommendations: For Tenda i12 version 1.0.0.103805, as a temporary workaround, consider disabling the...

CVE-2025-25678

Tenda i12 V1.0.0.103805 was discovered to contain a buffer overflow via the funcpara1 parameter in the formSetCfm function...

CVE-2025-25678

Tenda i12 V1.0.0.103805 was discovered to contain a buffer overflow via the funcpara1 parameter in the formSetCfm function...

The vulnerability of the formSetCfm() function in the Tenda AC18 router’s microprogramming software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the formSetCfm function in the Tenda AC18 router’s microprogramming software is related to the issue where the write operation goes beyond the buffer boundaries in memory when processing the funcpara1 parameter. Exploiting this vulnerability allows a remote attacker to execut...

CVE-2024-57578

Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the funcpara1 parameter in the formSetCfm function...

CVE-2024-57578: Out-of-bounds Write

Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the funcpara1 parameter in the formSetCfm function...

Tenda AC18 安全漏洞

The Tenda AC18 is a router from the Chinese company Tenda. A buffer overflow vulnerability exists in Tenda AC18 version 15.03.05.19, which is caused by the funcpara1 parameter of the formSetCfm function failing to correctly validate the length of the input data, and can be exploited by an attacke...