Security Advisory

CVE-2026-2192

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2026-02-08 23:02:07
Last updated 2026-02-23 09:51:06
Assigner VulDB
State PUBLISHED

Description

A security vulnerability has been detected in Tenda AC9 15.03.06.42_multi. Affected by this vulnerability is the function formGetRebootTimer. Such manipulation of the argument sys.schedulereboot.start_time/sys.schedulereboot.end_time leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed publicly and may be used.