CVE-2026-36823
- EPSS 0.31%
- Veröffentlicht 09.06.2026 00:00:00
- Zuletzt bearbeitet 09.06.2026 20:16:43
Shenzhen Tenda Technology Co., Ltd Tenda W20E v15.11.0.6 was discovered to contain a buffer overflow in the webAuthUserInfo parameter of the formAddWebAuthUser function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a cra...
CVE-2026-36822
- EPSS 0.31%
- Veröffentlicht 09.06.2026 00:00:00
- Zuletzt bearbeitet 09.06.2026 21:17:11
Shenzhen Tenda Technology Co., Ltd Tenda W20E v15.11.0.6 was discovered to contain a buffer overflow in the macAddr parameter of the formDelStaState function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted HTTP r...
CVE-2026-36821
- EPSS 0.31%
- Veröffentlicht 09.06.2026 00:00:00
- Zuletzt bearbeitet 09.06.2026 21:17:11
Shenzhen Tenda Technology Co., Ltd Tenda W20E v15.11.0.6 was discovered to contain a buffer overflow in the picCropName parameter of the formCropAndSetWewifiPic function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a cr...
CVE-2026-36820
- EPSS 0.31%
- Veröffentlicht 09.06.2026 00:00:00
- Zuletzt bearbeitet 09.06.2026 21:17:11
Shenzhen Tenda Technology Co., Ltd Tenda W20E v15.11.0.6 was discovered to contain a buffer overflow in the webAuthWhiteUserInfo parameter of the formAddWebAuthWhiteUser function. This vulnerability allows attackers to cause a Denial of Service (DoS)...
CVE-2026-36819
- EPSS 0.31%
- Veröffentlicht 09.06.2026 00:00:00
- Zuletzt bearbeitet 09.06.2026 21:17:11
Shenzhen Tenda Technology Co., Ltd Tenda W20E v15.11.0.6 was discovered to contain a buffer overflow in the bindMACAddr parameter of the fromSetDhcpRules function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted H...
CVE-2026-36818
- EPSS 0.31%
- Veröffentlicht 09.06.2026 00:00:00
- Zuletzt bearbeitet 10.06.2026 20:17:24
Shenzhen Tenda Technology Co., Ltd Tenda W20E v15.11.0.6 was discovered to contain a buffer overflow in the wewifiWhiteUserInfo parameter of the formAddWewifiWhiteUser function. This vulnerability allows attackers to cause a Denial of Service (DoS) v...
CVE-2026-11524
- EPSS 0.47%
- Veröffentlicht 08.06.2026 15:00:16
- Zuletzt bearbeitet 09.06.2026 01:34:33
A vulnerability has been found in Tenda W20E 15.11.0.6. Impacted is the function modifyWifiFilterRules of the file /goform/modifyWifiFilterRules of the component Web Management Interface. The manipulation of the argument wifiFilterListRemark leads to...
- EPSS 0.47%
- Veröffentlicht 08.06.2026 14:45:09
- Zuletzt bearbeitet 09.06.2026 01:34:33
A flaw has been found in Tenda W20E 15.11.0.6. This issue affects the function formPortalAuth of the file /goform/PortalAuth of the component Web Management Interface. Executing a manipulation of the argument gotoUrl can lead to stack-based buffer ov...
CVE-2026-11522
- EPSS 0.47%
- Veröffentlicht 08.06.2026 14:30:11
- Zuletzt bearbeitet 09.06.2026 01:34:33
A vulnerability was detected in Tenda W20E 15.11.0.6. This vulnerability affects the function formSetPortMirror of the file /goform/setPortMirror. Performing a manipulation of the argument portMirrorMirroredPorts results in stack-based buffer overflo...
CVE-2026-24112
- EPSS 0.53%
- Veröffentlicht 02.03.2026 00:00:00
- Zuletzt bearbeitet 03.03.2026 20:16:47
An issue was discovered in Tenda W20E V4.0br_V15.11.0.6. Attackers may exploit the vulnerability by specifying the value of `userInfo`. When `userInfo` is passed into the `addWewifiWhiteUser` function and processed by `sscanf` without size validation...