CVE-2026-24107

An issue was discovered in Tenda W20E V4.0brV15.11.0.6. Failure to validate the value of usbPartitionName, which is directly used in doSystemCmd, may lead to critical command injection vulnerabilities...

EUVD-2026-9185

An issue was discovered in Tenda W20E V4.0brV15.11.0.6. Attackers may exploit the vulnerability by controlling the value of nptr. When this value is passed into the getMibPrefix function and concatenated using sprintf without proper size validation, it could lead to a buffer overflow vulnerabilit...

PT-2026-22596

Name of the Vulnerable Software and Affected Versions Tenda W20E version 4.0br V15.11.0.6 Description An issue exists in the Tenda W20E router firmware. Attackers can exploit this issue by controlling the picName variable. The picName value is used in the sprintf function without proper size...

Tenda W20E 安全漏洞

The Tenda W20E is a router produced by the Chinese company Tenda. The version Tenda W20E V4.0brV15.11.0.6 contains a security vulnerability. This vulnerability arises from the lack of size validation before connecting to gstup and gstdwn, which may lead to a buffer overflow...

EUVD-2026-9181

An issue was discovered in Tenda W20E V4.0brV15.11.0.6. Attackers may exploit the vulnerability by controlling the value of nptr. When this value is passed into the getMibPrefix function and concatenated using sprintf without proper size validation, it could lead to a buffer overflow vulnerabilit...

PT-2026-22594

Name of the Vulnerable Software and Affected Versions Tenda W20E version 4.0br V15.11.0.6 Description A command injection issue exists in the Tenda W20E router firmware. The firmware does not properly validate the usbPartitionName variable before using it within the doSystemCmd function. This can...

CVE-2026-24112

CVE-2026-24112 affects Tenda W20E V4.0br_V15.11.0.6. The issue is a buffer overflow in addWewifiWhiteUser caused by processing the userInfo parameter with sscanf without size validation. Impact across confidentiality, integrity, and availability is described in sources; some documents note potent...

EUVD-2022-48834

Malicious code in bioql PyPI...

EUVD-2022-44124

Malicious code in bioql PyPI...

EUVD-2023-30598

Malicious code in bioql PyPI...

EUVD-2022-48835

Malicious code in bioql PyPI...

EUVD-2023-30599

Malicious code in bioql PyPI...

EUVD-2022-44125

Malicious code in bioql PyPI...

EUVD-2022-44123

Malicious code in bioql PyPI...

EUVD-2024-32442

Malicious code in bioql PyPI...

EUVD-2022-50842

Malicious code in bioql PyPI...

CVE-2023-26806

Tenda W20E v15.11.0.6USW20EV4.0brv15.11.0.610681546841 is vulnerable to Buffer Overflow via function formSetSysTime,...

CVE-2023-26805

Tenda W20E v15.11.0.6 USW20EV4.0brv15.11.0.610681546841CNTDC is vulnerable to Buffer Overflow via function formIPMacBindModify...

CVE-2022-40855

Tenda W20E router V15.11.0.6 contains a stack overflow in the function formSetPortMapping with post request 'goform/setPortMapping/'. This vulnerability allows attackers to cause a Denial of Service DoS or Remote Code Execution RCE via the portMappingServer, portMappingProtocol, portMappingWan,...

CVE-2022-48130

Tenda W20E v15.11.0.6 was discovered to contain multiple stack overflows in the function formSetStaticRoute via the parameters staticRouteNet, staticRouteMask, staticRouteGateway, staticRouteWAN...