CVE-2026-19788

A vulnerability was found in Tenda AC1206 15.03.06.23multiTD01. This affects the function setdevicename of the file /goform/SetOnlineDevName of the component httpd web management interface. The manipulation of the argument devName results in stack-based buffer overflow. The attack may be launched...

CVE-2026-19792 Tenda G0 httpd web management interface module setPortMapping buffer overflow

A security flaw has been discovered in Tenda G0 up to 20260625. Impacted is the function setPortMapping of the file /goform/module of the component httpd web management interface. Performing a manipulation of the argument portMappingServer/porMappingtInternal/portMappingExternal results in buffer...

CVE-2026-19792

A security flaw has been discovered in Tenda G0 up to 20260625. Impacted is the function setPortMapping of the file /goform/module of the component httpd web management interface. Performing a manipulation of the argument portMappingServer/porMappingtInternal/portMappingExternal results in buffer...

EUVD-2026-58585

A security flaw has been discovered in Tenda G0 up to 20260625. Impacted is the function setPortMapping of the file /goform/module of the component httpd web management interface. Performing a manipulation of the argument portMappingServer/porMappingtInternal/portMappingExternal results in buffer...

CVE-2026-19792

CVE-2026-19792 affects Tenda G0 devices; the httpd web management interface’s setPortMapping function in /goform/module is vulnerable to a buffer overflow via manipulated portMappingServer/porMappingtInternal/portMappingExternal. This enables remote exploitation with high impact (confidentiality,...

EUVD-2026-58584

A weakness has been identified in Tenda G0 up to 20260625. The affected element is the function addStaticRoute of the file /goform/module of the component httpd web management interface. Executing a manipulation of the argument staticRouteNet can lead to stack-based buffer overflow. The attack ma...

CVE-2026-19791 Tenda G0 httpd web management interface module addStaticRoute stack-based overflow

A weakness has been identified in Tenda G0 up to 20260625. The affected element is the function addStaticRoute of the file /goform/module of the component httpd web management interface. Executing a manipulation of the argument staticRouteNet can lead to stack-based buffer overflow. The attack ma...

CVE-2026-19791

CVE-2026-19791 – Tenda G0 httpd web management interface : A stack-based buffer overflow in the addStaticRoute function (file /goform/module) of the httpd web management interface. By manipulating the staticRouteNet argument, remote attackers could overflow the stack. Exploitation is possible rem...

Apache httpd <=2.4.29 - Arbitrary File Upload

Apache httpd 2.4.0 to 2.4.29 is susceptible to arbitrary file upload vulnerabilities via the expression specified in , which could match '$' to a newline character in a malicious filename rather than matching only the end of the filename. This could be exploited in environments where uploads of...

CVE-2026-19790 Tenda G0 httpd Web Management module formSetPortMirror stack-based overflow

A vulnerability was identified in Tenda G0 up to 20260625. This issue affects the function formSetPortMirror of the file /goform/module of the component httpd Web Management Interface. Such manipulation of the argument portMirrorMirroredPorts leads to stack-based buffer overflow. The attack can b...

EUVD-2026-58575

A vulnerability was identified in Tenda G0 up to 20260625. This issue affects the function formSetPortMirror of the file /goform/module of the component httpd Web Management Interface. Such manipulation of the argument portMirrorMirroredPorts leads to stack-based buffer overflow. The attack can b...

CVE-2026-19790

Tenda G0 devices with the httpd Web Management Interface are affected. The vulnerability lies in the formSetPortMirror function (in /goform/module), where manipulating the portMirrorMirroredPorts argument causes a stack-based overflow. This can be triggered remotely and has publicly available exp...

CVE-2026-19789 Tenda AC1206 httpd web management interface WifiGuestSet set_wl_guest_iplist stack-based overflow

A vulnerability was determined in Tenda AC1206 15.03.06.23multiTD01. This vulnerability affects the function setwlguestiplist of the file /goform/WifiGuestSet of the component httpd web management interface. This manipulation of the argument shareSpeed causes stack-based buffer overflow. Remote...

CVE-2026-19789

The vulnerability CVE-2026-19789 affects Tenda AC1206 devices running 15.03.06.23_multi_TD01, specifically the httpd web management interface’s /goform/WifiGuestSet function set_wl_guest_iplist. Manipulating the argument shareSpeed triggers a stack-based buffer overflow, leading to remote code ex...

EUVD-2026-58574

A vulnerability was determined in Tenda AC1206 15.03.06.23multiTD01. This vulnerability affects the function setwlguestiplist of the file /goform/WifiGuestSet of the component httpd web management interface. This manipulation of the argument shareSpeed causes stack-based buffer overflow. Remote...

CVE-2026-19788

This CVE affects Tenda AC1206 running 15.03.06.23_multi_TD01. The vulnerability resides in the httpd web management interface, specifically the SetOnlineDevName function (/goform/SetOnlineDevName). User-controlled argument devName triggers a stack-based buffer overflow, permitting a remote attack...

EUVD-2026-58573

A vulnerability was found in Tenda AC1206 15.03.06.23multiTD01. This affects the function setdevicename of the file /goform/SetOnlineDevName of the component httpd web management interface. The manipulation of the argument devName results in stack-based buffer overflow. The attack may be launched...

CVE-2026-19788 Tenda AC1206 httpd web management interface SetOnlineDevName set_device_name stack-based overflow

A vulnerability was found in Tenda AC1206 15.03.06.23multiTD01. This affects the function setdevicename of the file /goform/SetOnlineDevName of the component httpd web management interface. The manipulation of the argument devName results in stack-based buffer overflow. The attack may be launched...

Apache Tomcat JK Connect <=1.2.44 - Manager Access

Apache Tomcat JK modjk Connector 1.2.0 to 1.2.44 allows specially constructed requests to expose application functionality through the reverse proxy. It is also possible in some configurations for a specially constructed request to bypass the access controls configured in httpd. While there is so...

GLSA-202608-05 : Apache HTTPD: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202608-05 Apache HTTPD: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in Apache HTTPD. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block...