PT-2026-22653 · Tenda · Tenda Ac15V1.0

Akuma-Qaq · Publicado 2026-03-02 · Atualizado 2026-03-06 · CVE-2026-24105

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Tenda AC15V1.0 versions prior to V15.03.05.18 multi

Description An issue exists in the goform/formsetUsbUnload component of the software. The v1 variable is not properly validated, which could allow for command injection when used with the doSystemCmd function. This could potentially allow an attacker to execute arbitrary commands on the system.

Recommendations Update to a version later than V15.03.05.18 multi.

Exploit

Correção

DoS

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2026-24105

Produtos afetados

Tenda Ac15V1.0

Referências · 11

• 🔥 https://github.com/akuma-QAQ/CVEreport/tree/main/D-link/CVE-2026-24105 · Exploit
• https://twitter.com/cracbot/status/2029874884525097402 · Publicação no Twitter
• https://twitter.com/VulmonFeeds/status/2028637476013662208 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2026-24105 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2026-24105 · Nota de Segurança
• https://tenda.com.cn/material/show/2710 · Nota
• https://twitter.com/CVEnew/status/2028523510142800032 · Publicação no Twitter
• https://t.me/CVEtracker/46132 · Publicação no Telegram
• https://twitter.com/cracbot/status/2029512422105776559 · Publicação no Twitter
• https://twitter.com/infoflowcloud/status/2028526191364177995 · Publicação no Twitter
• https://t.me/cveNotify/153951 · Publicação no Telegram