CVE-2026-3400 - Vulnerability Analysis

Overview

Tenda AC15 <= 15.13.07.13 contains a stack-based buffer overflow caused by manipulation of the argument wpapsk_crypto2_4g in /goform/TextEditingConversion, letting remote attackers cause denial of service or execute code, exploit requires crafted request.

Severity & Score

Impact

Remote attackers can cause denial of service or execute arbitrary code, potentially compromising the device.

Mitigation

Update to the latest available version beyond 15.13.07.13.

References

• https://vuldb.com/?ctiid.348295
• https://vuldb.com/?id.348295
• https://vuldb.com/?submit.760109
• https://www.tenda.com.cn/
• https://www.yuque.com/ba1ma0-an29k/nnxoap/tzg68iadbmqx6esm?singleDoc#

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner