HarborGuard / CVE
Back to search
HIGHCVE-2026-2191Published Modified CNA VulDB

CVE-2026-2191: Tenda AC9 formGetDdosDefenceList stack-based overflow

A weakness has been identified in Tenda AC9 15.03.06.42_multi. Affected is the function formGetDdosDefenceList. This manipulation of the argument security.ddos.map causes stack-based buffer overflow. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks.

Metrics

CVSS v4.0
8.6
Severity
HIGH
Fixed in
—
Affected Products
1
Affected packages
  • Tenda / AC9
    15.03.06.42_multi
CVSS Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
References