Skip to content
OpenAdvisories
High · 8.8 CVE-2026-4905 EUVD-2026-16476

Tenda AC5 POST Request WifiWpsOOB formWifiWpsOOB stack-based overflow

Published Mar 26, 2026 · Updated Mar 27, 2026 · Assigned by VulDB

Description

A vulnerability was found in Tenda AC5 15.03.06.47. Impacted is the function formWifiWpsOOB of the file /goform/WifiWpsOOB of the component POST Request Handler. Performing a manipulation of the argument index results in stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been made public and could be used.

Affected products

VendorProductAffectedFixed
Tenda AC5 15.03.06.47 —

References