Tenda AC15 Sub B0488 Function Arbitrary Command Execution

The vulnerability of the subB0488 function goform/formSetIptv in the microprogramming software for Tenda AC15 is related to incorrect handling of code generation in memory when processing the parameter s11. Exploiting this vulnerability can allow an attacker to execute arbitrary commands remotely...

EUVD-2026-9196

An issue was discovered in goform/formSetIptv in Tenda AC15V1.0 V15.03.05.18multi. When the condition is met, s11 will be passed into subB0488, concatenated into doSystemCmd. The value of s11 is not validated, potentially leading to a command injection vulnerability...

CVE-2026-24101

An issue was discovered in goform/formSetIptv in Tenda AC15V1.0 V15.03.05.18multi. When the condition is met, s11 will be passed into subB0488, concatenated into doSystemCmd. The value of s11 is not validated, potentially leading to a command injection vulnerability...

CVE-2026-24101

The Tenda AC15 wireless router (specifically version V15.03.05.18_multi ) is vulnerable to a command injection flaw within the goform/formSetIptv function. The root cause is the improper handling of the s1_1 parameter, which is passed into the sub_B0488 function and concatenated into doSystemCmd ...

CVE-2026-24101: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered in goform/formSetIptv in Tenda AC15V1.0 V15.03.05.18multi. When the condition is met, s11 will be passed into subB0488, concatenated into doSystemCmd. The value of s11 is not validated, potentially leading to a command injection vulnerability...