PT-2026-66786 · Undefined · Undefined

CVE-2026-67822 · Publicado 2026-07-31 · Atualizado 2026-07-31

NVD

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tenda W6-S 1.0.0.4(510) contains a stack-based buffer overflow vulnerability in the /goform/wifiSSIDset endpoint. The function formwrlSSIDset uses sprintf to copy user-controlled 'GO' and 'index' parameters into a 64-byte stack buffer without length restriction, leading to stack overflow.

Exploit

Correção

Stack Overflow

Enumeração de Fraquezas

CWE-121

Identificadores relacionados

CVE-2026-67822

Produtos afetados

Undefined

Referências · 2

• 🔥 https://github.com/Tristerjh/Tenda/blob/main/Tenda_W6-S_GO_overflow.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-67822 · Nota de Segurança