CVE-2026-19791

CVE-2026-19791 – Tenda G0 httpd web management interface : A stack-based buffer overflow in the addStaticRoute function (file /goform/module) of the httpd web management interface. By manipulating the staticRouteNet argument, remote attackers could overflow the stack. Exploitation is possible rem...

CVE-2026-19790

Tenda G0 devices with the httpd Web Management Interface are affected. The vulnerability lies in the formSetPortMirror function (in /goform/module), where manipulating the portMirrorMirroredPorts argument causes a stack-based overflow. This can be triggered remotely and has publicly available exp...