The vulnerability of the pPortMapIndex function (implemented in goform/formDelPortMapping) in the Tenda W20E router software allows a hacker to execute arbitrary commands.

The vulnerability of the pPortMapIndex function implemented in goform/formDelPortMapping of the Tenda W20E router software is related to the execution of operations outside the buffer in the parameter strcpy area of memory. Exploiting this vulnerability allows a remote attacker to execute arbitra...

CVE-2026-24114: Buffer Copy without Checking Size of Input

An issue was discovered in Tenda W20E V4.0brV15.11.0.6. Failure to validate pPortMapIndex may lead to buffer overflows when using strcpy...