EUVD-2026-53358

OpenBK7231T's /cfgwifiset endpoint src/httpserver/httpfns.c accepts configuration changes via a plain GET request with no CSRF token. If the webadminpasswordenabled parameter is absent from the request, an else-branch silently clears the device's web admin password to an empty string. A one-click...

PT-2026-68146

Name of the Vulnerable Software and Affected Versions OpenBK7231T affected versions not specified Description The '/cfg wifi set' endpoint in 'src/httpserver/http fns.c' allows configuration changes through a GET request without requiring a Cross-Site Request Forgery CSRF token. CSRF is a type of...

CVE-2026-4228

A vulnerability was detected in LB-LINK BL-WR9000 2.4.9. This affects the function sub458754 of the file /goform/setwifi. The manipulation results in command injection. It is possible to launch the attack remotely. The exploit is now public and may be used. The vendor was contacted early about th...

Tenda A18 安全漏洞

The Tenda A18 is a AC1200 dual-band Wi-Fi repeater produced by the Chinese company Tenda. The Tenda A18 Pro version, at build number 02.03.02.28, contains a security vulnerability. This vulnerability stems from a stack buffer overflow in the function formfastsettingwifiset found in the...

PT-2026-21388

Name of the Vulnerable Software and Affected Versions Tenda A21 version 1.0.0.0 Description A stack-based buffer overflow exists in the form fast setting wifi set function located in the /goform/fast setting wifi set file. Manipulation of the ssid argument can trigger the overflow, allowing for...

CVE-2026-2139

A vulnerability was determined in Tenda TX9 up to 22.03.02.10multi. Affected by this vulnerability is the function sub432580 of the file /goform/fastsettingwifiset. This manipulation of the argument ssid causes buffer overflow. The attack may be initiated remotely. The exploit has been publicly...

PT-2026-3773

Name of the Vulnerable Software and Affected Versions Tenda AX-1803 version 1.0.0.1 Description The Tenda AX-1803 router contains a stack overflow in the ssid parameter of the form fast setting wifi set function. This issue allows attackers to cause a Denial of Service DoS by sending a crafted...

PT-2025-44669

Name of the Vulnerable Software and Affected Versions Tenda AX-1803 version 1.0.0.1 Description The Tenda AX-1803 router contains a stack overflow issue through the timeZone parameter within the form fast setting wifi set function. A crafted request can lead to a Denial of Service DoS. The...

EUVD-2025-35614

Tenda AC6 V2.0 15.03.06.50 was discovered to contain a stack overflow in the ssid parameter in the fastsettingwifiset function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2025-60341

Tenda AC6 V2.0 15.03.06.50 was discovered to contain a stack overflow in the ssid parameter in the fastsettingwifiset function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

PT-2025-30669 · Tenda · Tenda Ac8V4

Name of the Vulnerable Software and Affected Versions: Tenda AC8V4 version 16.03.34.06 Description: The Tenda AC8V4 device contains a stack overflow issue at the /goform/fast setting wifi set API endpoint. Manipulation of the timeZone parameter leads to a stack-based buffer overflow...

CVE-2022-40075

Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, formfastsettingwifiset...

CVE-2022-45654

Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the ssid parameter in the formfastsettingwifiset function...

PT-2025-15100

Name of the Vulnerable Software and Affected Versions Tenda AC1206 version 15.03.06.23 Description A critical issue is present in the function form fast setting wifi set of the file /goform/fast setting wifi set, where the manipulation of the argument ssid/timeZone leads to a buffer overflow. Thi...

PT-2025-12361

Name of the Vulnerable Software and Affected Versions Tenda AC6 version 15.03.05.16 Description A issue was found that affects the functionality of the /goform/fast setting wifi set file. The use of the timeZone parameter causes a stack-based buffer overflow. Recommendations For Tenda AC6 version...

PT-2025-11692

Name of the Vulnerable Software and Affected Versions Tenda AC7 version V15.03.06.44 Description A buffer overflow issue is caused by the timeZone parameter in the form fast setting wifi set function, which can lead to remote code execution RCE. Recommendations For Tenda AC7 version V15.03.06.44,...

The vulnerability of the form_fast_setting_wifi_set function in the microprogramming software for Tenda AC18 allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the formfastsettingwifiset function in the Tenda AC18 router’s microprogramming software is related to buffer overflow during the processing of the ssid parameter. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary codes...

Tenda AC10 安全漏洞

The Tenda AC10 is an 11ac dual band router designed for homes with 200 megabit and above fiber. A stack buffer overflow vulnerability exists in the Tenda AC10. The vulnerability stems from a stack-based buffer overflow caused by the parameter timeZone in the FUN0044db3c function of the...

PT-2024-6685 · Tenda · Tenda A301

Name of the Vulnerable Software and Affected Versions: Tenda A301 version 15.13.08.12 Description: A critical issue has been found in the function formWifiBasicSet of the file /goform/SetOnlineDevName, where the manipulation of the argument devName leads to a stack-based buffer overflow. This can...

Tenda AC18 安全漏洞

Tenda AC18 is a dual-band wireless router launched by Shenzhen Jixiang Tenda Technology Co. in July 2016, mainly for villas and large home users. Tenda AC18 suffers from a buffer overflow vulnerability, which originates from a buffer overflow vulnerability in the ssid parameter of the...