CVE-2026-4960 in Tenda AC6

Сводка (Английский)

A vulnerability was determined in Tenda AC6 15.03.05.16. Affected is the function fromWizardHandle of the file /goform/WizardHandle of the component POST Request Handler. Executing a manipulation of the argument WANT/WANS can lead to stack-based buffer overflow. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Раскрытие

27.03.2026

Записи

VulDB provides additional information and datapoints for this CVE:

ИД	Уязвимость	CWE	Экс	Кон	CVE
353837	Tenda AC6 POST WizardHandle fromWizardHandle повреждение памяти	121	Доказательство концепции	Не определено	CVE-2026-4960