CVE-2026-4974

creationtimestamp| type| source ---|---|--- 2026-03-27 21:23:25+00:00| published-proof-of-concept| Telegram/wWPS0byCXjzJleEHKN6yjldptusIbQ1L7WvvuLFtEg9AE-Q 2026-03-27 23:45:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi3cfrfb6l2n 2026-03-30 22:00:14+00:00| seen|...

CVE-2026-4974 Tenda AC7 POST Request SetSysTimeCfg fromSetSysTime memory corruption

A flaw has been found in Tenda AC7 15.03.06.44. Affected by this issue is the function fromSetSysTime of the file /goform/SetSysTimeCfg of the component POST Request Handler. Executing a manipulation of the argument Time can lead to stack-based buffer overflow. It is possible to launch the attack...