CVE-2026-9431

Affected product: Tenda F1202 (firmware 1.2.0.20(408)). The vulnerability is in the fromPptpUserAdd function of /goform/PptpUserAdd, where manipulating the opttype argument triggers a stack-based buffer overflow. Remote attack is possible and the exploit is publicly available. CVSS-derived detail...