CVE-2026-24110 - Vulnerability Analysis
CriticalCVSS: 9.8Last Updated: March 2, 2026
Tenda W20E - Buffer Overflow
Published: March 2, 2026Updated: March 2, 2026Remote Exploitable
Overview
Tenda W20E V4.0br_V15.11.0.6 contains a buffer overflow caused by lack of size validation in addDhcpRules data processed by sscanf in addDhcpRule function, letting attackers cause memory corruption remotely, exploit requires crafted input.
Severity & Score
Severity: Critical
CVSS Score: 9.8
Impact
Attackers can cause memory corruption leading to potential remote code execution or system crash.
Mitigation
Update to the latest firmware version provided by Tenda.
References
Related Resources
Details
- CVE ID
- CVE-2026-24110
- Severity
- Critical
- CVSS Score
- 9.8
- Type
- buffer_overflow
- Status
- unconfirmed
CWE
- CWE-120
CVSS Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H