CVE-2026-5155 Tenda CH22 Parameter AdvSetWan fromAdvSetWan stack-based overflow

A vulnerability was found in Tenda CH22 1.0.0.1. This affects the function fromAdvSetWan of the file /goform/AdvSetWan of the component Parameter Handler. The manipulation of the argument wanmode results in stack-based buffer overflow. The attack can be executed remotely. The exploit has been mad...

CVE-2025-13445

CVE-2025-13445 affects Tenda AC21 16.03.08.16. The issue is a stack-based buffer overflow in the /goform/SetIpMacBind handling, caused by insufficient validation of the argument list. This enables remote execution of code on the device, with exploit publicly published. CVSS-based assessments indi...

PT-2025-39754

Name of the Vulnerable Software and Affected Versions Tenda AC21 versions up to 16.03.08.16 Description A security issue exists in Tenda AC21 routers. A buffer overflow can be triggered remotely through manipulation of the argument list within the sscanf function located in the...

PT-2025-33605 · Tenda · Tenda Ac20

Name of the Vulnerable Software and Affected Versions: Tenda AC20 version 16.03.08.12 Description: A stack-based buffer overflow vulnerability exists in the save virtualser data function of the /goform/formSetVirtualSer file. The vulnerability is triggered by manipulating the argument list,...