CVE-2026-4492 Tenda A18 Pro formSetQosBand set_qosMib_list stack-based overflow

A vulnerability was found in Tenda A18 Pro 02.03.02.28. The affected element is the function setqosMiblist of the file /goform/formSetQosBand. Performing a manipulation of the argument list results in stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has...

The vulnerability of the set_qosMib_list() function in Tenda AC8 router software allows a hacker to trigger a service failure.

The vulnerability of the setqosMiblist function in the Tenda AC8 router’s microprogramming software lies in the ability to write data beyond the buffer in memory during the processing of the list parameter. Exploiting this vulnerability could allow a malicious actor to cause service failure...