CVE-2026-24112 - Vulnerability Analysis

Overview

Tenda W20E V4.0br_V15.11.0.6 contains a buffer overflow caused by unchecked size validation in sscanf processing of userInfo in addWewifiWhiteUser function, letting attackers execute arbitrary code remotely, exploit requires crafted userInfo input.

Severity & Score

Impact

Attackers can execute arbitrary code remotely by exploiting buffer overflow, potentially leading to full system compromise.

Mitigation

Update to the latest version or apply vendor patches addressing buffer overflow in addWewifiWhiteUser function.

References

• https://github.com/akuma-QAQ/CVEreport/tree/main/D-link/CVE-2026-24112
• https://www.tenda.com.cn/material/show/2707

Social Media Activity(1 post)

TheHackerWire

@thehackerwire

Mar 3, 2026

🔴 CVE-2026-24112 - Critical (9.8) An issue was discovered in Tenda W20E V4.0br_V15.11.0.6. Attackers may exploit the vulnerability by specifying the value of `userInfo`. When `userInfo` is passed into the `addWewifiWhiteUser` function and processed by `sscanf` without size validat... 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-24112/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner