Skip to content
CVE PROGRAM SOURCE RECORD8.6 High

CVE-2026-2191

Tenda AC9 formGetDdosDefenceList stack-based overflow

Description

A weakness has been identified in Tenda AC9 15.03.06.42_multi. Affected is the function formGetDdosDefenceList. This manipulation of the argument security.ddos.map causes stack-based buffer overflow. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Tenda AC9

  • 15.03.06.42_multiaffected

References