CVE-2026-24115

Summary (CVE-2026-24115) : Affects Tenda W20E router firmware version V4.0br_V15.11.0.6. The issue is a failure to validate the sizes of the buffers ‘gstup’ and ‘gstdwn’ before concatenating them into ‘gstruleQos’, which can cause a buffer overflow. CVSS v3.1 base score is 9.8 (CRITICAL) with net...

The vulnerability of the formIPMacBindModify function in the microprogrammed wireless Wi-Fi router software Tenda W20E allows a attacker to cause a service failure or execute arbitrary code.

The vulnerability of the formIPMacBindModify function in the microprogrammed wireless Wi-Fi router software Tenda W20E is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary code...