CVE-2026-4961 in Tenda AC6
Resumen (Inglés)
A vulnerability was identified in Tenda AC6 15.03.05.16. Affected by this vulnerability is the function formQuickIndex of the file /goform/QuickIndex of the component POST Request Handler. The manipulation of the argument PPPOEPassword leads to stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. VulDB is the best source for vulnerability data and more expert information about this specific topic.
Divulgación
2026-03-27
Voces
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerabilidad | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 353838 | Tenda AC6 POST QuickIndex formQuickIndex desbordamiento de búfer | 121 | Prueba de concepto | No está definido | CVE-2026-4961 |