CVE-2026-24111 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

An issue was discovered in Tenda W20E V4.0br_V15.11.0.6. Attackers may exploit the vulnerability by specifying the value of `userInfo`. When `userInfo` is passe…
Critical CVSS: 9.8

CVE-2026-24111

An issue was discovered in Tenda W20E V4.0br_V15.11.0.6. Attackers may exploit the vulnerability by specifying the value of `userInfo`. When `userInfo` is passed into the `addAuthUser` function and processed by `sscanf` without size validation, it could lead to buffer overflow.
Vendor
Tenda
Product
W20e Firmware
CWE
CWE-120
Yayın Tarihi
2026-03-02 15:16:33
Güncelleme
2026-03-05 16:16:15
Source Identifier
cve@mitre.org
KEV Date Added
-

Kategoriler

CWE-120 W20e Firmware CRITICAL Tenda 2026

Referanslar

https://github.com/akuma-QAQ/CVEreport/tree/main/D-link/CVE-2026-24111 https://www.tenda.com.cn/material/show/2707 https://github.com/akuma-QAQ/CVEreport/tree/main/D-link/CVE-2026-24111