CVE-2026-19792 in Tenda
Summary
by MITRE • 08/14/2026
A security flaw has been discovered in Tenda G0 up to 20260625. Impacted is the function setPortMapping of the file /goform/module of the component httpd web management interface. Performing a manipulation of the argument portMappingServer/porMappingtInternal/portMappingExternal results in buffer overflow. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks.
Be aware that VulDB is the high quality source for vulnerability data.
Analysis
by VulDB Data Team • 08/14/2026
The vulnerability identified in Tenda G0 firmware versions up to 20260625 represents a critical buffer overflow condition within the web management interface component. This flaw exists in the setPortMapping function of the /goform/module file, which is part of the httpd web server implementation used for device administration. The vulnerability arises from insufficient input validation and bounds checking when processing parameters related to port mapping configuration, specifically targeting the portMappingServer, portMappingInternal, and portMappingExternal arguments. The buffer overflow occurs during the manipulation of these parameters through the web interface, creating a potential entry point for malicious actors to execute arbitrary code on the affected device.
The technical exploitation of this vulnerability enables remote code execution through crafted input values that exceed the allocated buffer space within the httpd web server process. This type of flaw falls under CWE-121, which describes stack-based buffer overflow conditions, and more specifically aligns with CWE-787, indicating out-of-bounds write vulnerabilities. The attack surface is particularly concerning as it allows remote exploitation without requiring authentication, making it accessible to any attacker who can reach the device's web management interface. When successfully exploited, this vulnerability could enable attackers to gain full administrative control over the device, potentially allowing them to modify network configurations, install malicious software, or use the device as a pivot point for attacking other systems within the local network.
The operational impact of this vulnerability extends beyond simple remote code execution, as it provides attackers with persistent access to the device's network services and potentially allows for lateral movement within compromised networks. According to ATT&CK framework, this vulnerability maps to T1059.007 (Command and Scripting Interpreter: PowerShell) and T1071.004 (Application Layer Protocol: DNS) through potential exploitation of the device's network services. The public availability of exploit code significantly increases the risk profile, as automated attacks can be readily deployed against vulnerable devices in the wild. Network administrators should consider this vulnerability as a high-priority threat due to its remote exploitability and the potential for widespread impact across networks utilizing affected Tenda G0 devices.
Mitigation strategies should focus on immediate firmware updates from Tenda to address the buffer overflow condition, implementing network segmentation to limit exposure of management interfaces, and deploying intrusion detection systems to monitor for exploitation attempts. Additional protective measures include disabling unnecessary web management services when not required, implementing strong access controls with complex authentication mechanisms, and regularly monitoring device logs for anomalous port mapping activities. Organizations should also consider network-based firewalls to restrict access to the device's management ports from untrusted networks, while maintaining comprehensive vulnerability assessment programs to identify similar issues in other network infrastructure components. The remediation process must include thorough testing of firmware updates to ensure compatibility with existing network configurations and services before deployment across production environments.