CVE-2026-36823

The Tenda W20E router (version 15.11.0.6 ) is vulnerable to a stack-based buffer overflow in the formAddWebAuthUser function. The root cause is improper memory handling when processing the webAuthUserInfo parameter. An unauthenticated attacker can exploit this by sending a specially crafted HTTP ...