CVE-2026-24115

CVE-2026-24115 affects Tenda W20E V4.0br_V15.11.0.6. The issue is a failure to validate the sizes of the fields gstup and gstdwn before concatenating them into gstruleQos , which may cause a buffer overflow. Exploit details or concrete fixes are not provided in the available documents. Mitigation...

The vulnerability of the formIPMacBindModify function in the microprogrammed wireless Wi-Fi router software Tenda W20E allows a attacker to cause a service failure or execute arbitrary code.

The vulnerability of the formIPMacBindModify function in the microprogrammed wireless Wi-Fi router software Tenda W20E is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary code...