Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2026-11523

Tenda W20E Web Management PortalAuth formPortalAuth stack-based overflow

Description

A flaw has been found in Tenda W20E 15.11.0.6. This issue affects the function formPortalAuth of the file /goform/PortalAuth of the component Web Management Interface. Executing a manipulation of the argument gotoUrl can lead to stack-based buffer overflow. The attack can be launched remotely. The exploit has been published and may be used.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Tenda W20E

  • 15.11.0.6affected

References