Beveiligingsadvies

CVE-2026-6016

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-04-10 05:00:23
Laatst bijgewerkt 2026-04-10 13:40:04
Toegewezen door VulDB
CVSS-score 9.0
Status PUBLISHED

Beschrijving

A vulnerability was found in Tenda AC9 15.03.02.13. The affected element is the function decodePwd of the file /goform/WizardHandle of the component POST Request Handler. Performing a manipulation of the argument WANS results in stack-based buffer overflow. The attack can be initiated remotely. The exploit has been made public and could be used.