CVE-2026-24113

An issue was discovered in Tenda W20E V4.0brV15.11.0.6. Attackers may exploit the vulnerability by controlling the value of nptr. When this value is passed into the getMibPrefix function and concatenated using sprintf without proper size validation, it could lead to a buffer overflow vulnerabilit...

CVE-2026-24108

The CVE-2026-24108 vulnerability affects Tenda W20E devices in version V4.0br_V15.11.0.6. The root cause is a buffer overflow triggered when an attacker-controlled value (nptr) is passed to getMibPrefix and concatenated via sprintf without proper size validation. This could allow an overflow, lea...