CVE-2026-4974 in AC7
Sumário
de MITRE • 27/03/2026
A flaw has been found in Tenda AC7 15.03.06.44. Affected by this issue is the function fromSetSysTime of the file /goform/SetSysTimeCfg of the component POST Request Handler. Executing a manipulation of the argument Time can lead to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been published and may be used.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.