GHSA-w69v-2wp6-xxjpCriticalCVSS 10.0
A vulnerability was determined in Tenda AC19 16.03.10.07. Affected by this issue is the function...
🔗 CVE IDs covered (1)
📋 Description
A vulnerability was determined in Tenda AC19 16.03.10.07. Affected by this issue is the function saveParentControlInfo of the file /goform/saveParentControlInfo. This manipulation of the argument deviceId causes heap-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.
🔗 References (8)
- https://nvd.nist.gov/vuln/detail/CVE-2026-123966
- https://github.com/Tmzop/Tenda-AC19-saveParentControlInfo/blob/main/report.md
- https://vuldb.com/cve/CVE-2026-123966
- https://vuldb.com/submit/1035173
- https://vuldb.com/vuln/432038
- https://vuldb.com/vuln/432038/cti
- https://www.tenda.com.cn
- https://github.com/advisories/GHSA-w69v-2wp6-xxjp