EUVD-2026-9196

An issue was discovered in goform/formSetIptv in Tenda AC15V1.0 V15.03.05.18multi. When the condition is met, s11 will be passed into subB0488, concatenated into doSystemCmd. The value of s11 is not validated, potentially leading to a command injection vulnerability...

CVE-2026-24101

The Tenda AC15 wireless router (specifically version V15.03.05.18_multi ) is vulnerable to a command injection flaw within the goform/formSetIptv function. The root cause is the improper handling of the s1_1 parameter, which is passed into the sub_B0488 function and concatenated into doSystemCmd ...