Lucene search
+L

344 matches found

BDU FSTEC
BDU FSTEC
•added 2026/09/18 12:00 a.m.•7 views

The vulnerability of the gstruleQos function (goform/guestWifiRuleRefresh) in the Tenda W20E router software allows a intruder to execute arbitrary commands.

The vulnerability of the gstruleQos function goform/guestWifiRuleRefresh in the Tenda W20E router microprogramming software is related to the execution of operations outside the buffer in the gstup and gstdwn parameters’ memory. Exploiting this vulnerability allows a remote attacker to execute...

10CVSS7.5AI score0.00694EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/09/15 12:00 a.m.•8 views

The vulnerability of the formDelWebAuthWhiteUser function in the microprogramming software for wireless Wi-Fi routers Tenda W20E allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formDelWebAuthWhiteUser function in the wireless Wi-Fi router software Tenda W20E is related to the operation of the webAuthWhiteUserIndex parameter that goes beyond the buffer in memory. Exploiting this vulnerability allows an attacker to compromise the confidentiality,...

9CVSS8.5AI score0.00854EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/09/15 12:00 a.m.•5 views

The vulnerability of the formIPMacBindAdd function in the HTTP Handler component of the wireless Wi-Fi routers from Tenda, allowing a hacker to cause a service failure.

The vulnerability of the formIPMacBindAdd function in the HTTP Handler component of the wireless Wi-Fi routers from Tenda, the Tenda W20E, is related to the issue where the operation is executed outside the buffer in memory when processing the IPMacBindRule parameter. Exploiting this vulnerabilit...

6.8CVSS7.2AI score0.00708EPSS
SaveExploits0References3Affected Software1
NVD
NVD
•added 2026/09/14 7:17 a.m.•12 views

CVE-2026-90689

A security flaw has been discovered in Tenda W20E 15.11.0.610681546841CNTDC. Impacted is the function formDelWebAuthWhiteUser. Performing a manipulation of the argument webAuthWhiteUserIndex results in stack-based buffer overflow. The attack can be initiated remotely...

9CVSS0.00854EPSS
SaveExploits0References6
NVD
NVD
•added 2026/09/14 7:17 a.m.•14 views

CVE-2026-90688

A vulnerability was identified in Tenda W20E 15.11.0.610681546841CNTDC. This issue affects the function formIPMacBindAdd of the component HTTP Handler. Such manipulation of the argument IPMacBindRule leads to stack-based buffer overflow. It is possible to launch the attack remotely...

7.1CVSS0.00708EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/09/14 6:15 a.m.•39 views

CVE-2026-90689 Tenda W20E formDelWebAuthWhiteUser stack-based overflow

A security flaw has been discovered in Tenda W20E 15.11.0.610681546841CNTDC. Impacted is the function formDelWebAuthWhiteUser. Performing a manipulation of the argument webAuthWhiteUserIndex results in stack-based buffer overflow. The attack can be initiated remotely...

9CVSS0.00854EPSS
SaveExploits0References6
CVE
CVE
•added 2026/09/14 6:15 a.m.•16 views

CVE-2026-90689

A stack-based buffer overflow vulnerability exists in the Tenda W20E wireless router, specifically in the formDelWebAuthWhiteUser function within firmware version 15.11.0.61068_1546_841_CN_TDC . By manipulating the webAuthWhiteUserIndex argument, an authenticated remote attacker can trigger the o...

9CVSS8.5AI score0.00854EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/09/14 6:15 a.m.•9 views

CVE-2026-90689 Tenda W20E formDelWebAuthWhiteUser stack-based overflow

A security flaw has been discovered in Tenda W20E 15.11.0.610681546841CNTDC. Impacted is the function formDelWebAuthWhiteUser. Performing a manipulation of the argument webAuthWhiteUserIndex results in stack-based buffer overflow. The attack can be initiated remotely...

9CVSS8.5AI score0.00854EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/09/14 6:15 a.m.•12 views

EUVD-2026-77311

A security flaw has been discovered in Tenda W20E 15.11.0.610681546841CNTDC. Impacted is the function formDelWebAuthWhiteUser. Performing a manipulation of the argument webAuthWhiteUserIndex results in stack-based buffer overflow. The attack can be initiated remotely...

9CVSS8.5AI score0.00854EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/09/14 6:00 a.m.•7 views

CVE-2026-90688 Tenda W20E HTTP formIPMacBindAdd stack-based overflow

A vulnerability was identified in Tenda W20E 15.11.0.610681546841CNTDC. This issue affects the function formIPMacBindAdd of the component HTTP Handler. Such manipulation of the argument IPMacBindRule leads to stack-based buffer overflow. It is possible to launch the attack remotely...

7.1CVSS7.3AI score0.00708EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/09/14 6:00 a.m.•43 views

CVE-2026-90688 Tenda W20E HTTP formIPMacBindAdd stack-based overflow

A vulnerability was identified in Tenda W20E 15.11.0.610681546841CNTDC. This issue affects the function formIPMacBindAdd of the component HTTP Handler. Such manipulation of the argument IPMacBindRule leads to stack-based buffer overflow. It is possible to launch the attack remotely...

7.1CVSS0.00708EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/09/14 6:00 a.m.•9 views

EUVD-2026-77306

A vulnerability was identified in Tenda W20E 15.11.0.610681546841CNTDC. This issue affects the function formIPMacBindAdd of the component HTTP Handler. Such manipulation of the argument IPMacBindRule leads to stack-based buffer overflow. It is possible to launch the attack remotely...

7.1CVSS7.3AI score0.00708EPSS
SaveExploits0References6
CVE
CVE
•added 2026/09/14 6:00 a.m.•19 views

CVE-2026-90688

Tenda W20E (version 15.11.0.61068_1546_841_CN_TDC ) is affected by a stack-based buffer overflow in the function formIPMacBindAdd within the HTTP Handler component. Manipulating the IPMacBindRule argument triggers the overflow. The vulnerability is exploitable remotely with low privileges and no ...

7.1CVSS7.3AI score0.00708EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/09/14 12:00 a.m.•17 views

PT-2026-91062

A vulnerability was identified in Tenda W20E 15.11.0.61068 1546 841 CN TDC. This issue affects the function formIPMacBindAdd of the component HTTP Handler. Such manipulation of the argument IPMacBindRule leads to stack-based buffer overflow. It is possible to launch the attack remotely...

7.1CVSS7.3AI score0.00708EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/09/14 12:00 a.m.•16 views

PT-2026-91107

A security flaw has been discovered in Tenda W20E 15.11.0.61068 1546 841 CN TDC. Impacted is the function formDelWebAuthWhiteUser. Performing a manipulation of the argument webAuthWhiteUserIndex results in stack-based buffer overflow. The attack can be initiated remotely...

9CVSS8.5AI score0.00854EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/14 12:00 a.m.•0 views

CVE-2026-90688: Stack-based Buffer Overflow

A vulnerability was identified in Tenda W20E 15.11.0.610681546841CNTDC. This issue affects the function formIPMacBindAdd of the component HTTP Handler. Such manipulation of the argument IPMacBindRule leads to stack-based buffer overflow. It is possible to launch the attack remotely...

7.1CVSS7.1AI score0.00708EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/14 12:00 a.m.•1 views

CVE-2026-90689: Stack-based Buffer Overflow

A security flaw has been discovered in Tenda W20E 15.11.0.610681546841CNTDC. Impacted is the function formDelWebAuthWhiteUser. Performing a manipulation of the argument webAuthWhiteUserIndex results in stack-based buffer overflow. The attack can be initiated remotely...

9CVSS8.3AI score0.00854EPSS
SaveExploits0References3
NVD
NVD
•added 2026/08/17 9:16 p.m.•13 views

CVE-2026-67966

Tenda W20E V16.01.0.62782 /goform/telnet endpoint allows unauthenticated remote attackers to activate the Telnet daemon and obtain root shell access...

9.8CVSS0.00594EPSS
SaveExploits1References1
NVD
NVD
•added 2026/08/17 9:16 p.m.•24 views

CVE-2026-67967

Buffer Overflow vulnerability in Tenda W20E V16.01.0.62782 allows an attacker to execute arbitrary code. This is an incomplete fix for CVE-2025-44867 and CVE-2026-36819...

9.8CVSS0.00649EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2026/08/17 12:00 a.m.•41 views

CVE-2026-67967

Buffer Overflow vulnerability in Tenda W20E V16.01.0.62782 allows an attacker to execute arbitrary code. This is an incomplete fix for CVE-2025-44867 and CVE-2026-36819...

0.00649EPSS
SaveExploits1References1
Rows per page
Query Builder