Skip to content
CVE PROGRAM SOURCE RECORD8.6 High

CVE-2026-2192

Tenda AC9 formGetRebootTimer stack-based overflow

Description

A security vulnerability has been detected in Tenda AC9 15.03.06.42_multi. Affected by this vulnerability is the function formGetRebootTimer. Such manipulation of the argument sys.schedulereboot.start_time/sys.schedulereboot.end_time leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed publicly and may be used.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Tenda AC9

  • 15.03.06.42_multiaffected

References