CVE-2026-3400

High CVSS: 7.4

A security flaw has been discovered in Tenda AC15 up to 15.13.07.13. Affected by this issue is some unknown functionality of the file /goform/TextEditingConversion. The manipulation of the argument wpapsk_crypto2_4g results in stack-based buffer overflow. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks.

Vendor

Tenda

Product

Ac15 Firmware

CWE

CWE-119

Yayın Tarihi

2026-03-02 00:16:03

Güncelleme

2026-03-03 19:48:04

Source Identifier

cna@vuldb.com

KEV Date Added

Kategoriler

CWE-119 Ac15 Firmware HIGH Tenda 2026

Referanslar

https://vuldb.com/?ctiid.348295 https://vuldb.com/?id.348295 https://vuldb.com/?submit.760109 https://www.tenda.com.cn/ https://www.yuque.com/ba1ma0-an29k/nnxoap/tzg68iadbmqx6esm?singleDoc#

Benzer Kayıtlar

Medium

CVE-2026-5339

A vulnerability was detected in Tenda G103 1.0.0.5. The impacted element is the function action_set_net_settings of the…

High

CVE-2026-5204

A vulnerability was determined in Tenda CH22 1.0.0.1. Affected is the function formWebTypeLibrary of the file /goform/we…

High

CVE-2026-5156

A vulnerability was determined in Tenda CH22 1.0.0.1. This impacts the function formQuickIndex of the file /goform/Quick…

High

CVE-2026-5155

A vulnerability was found in Tenda CH22 1.0.0.1. This affects the function fromAdvSetWan of the file /goform/AdvSetWan o…

Medium

CVE-2026-5153

A flaw has been found in Tenda CH22 1.0.0.1. The affected element is the function FormWriteFacMac of the file /goform/Wr…

High

CVE-2026-5152

A vulnerability was detected in Tenda CH22 1.0.0.1. Impacted is the function formCreateFileName of the file /goform/crea…