high8.8
CVE-2026-11523
A flaw has been found in Tenda W20E 15.11.0.6.
Impact
A flaw has been found in Tenda W20E 15.11.0.6. This issue affects the function formPortalAuth of the file /goform/PortalAuth of the component Web Management Interface. Executing a manipulation of the argument gotoUrl can lead to stack-based buffer overflow. The attack can be launched remotely. The exploit has been published and may be used.
Affected packages
This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/Robots10/IoT_vlu/blob/main/reports/Tenda/formPortalAuth/formPortalAuth.md
- https://vuldb.com/cve/CVE-2026-11523
- https://vuldb.com/submit/836471
- https://vuldb.com/vuln/369143
- https://vuldb.com/vuln/369143/cti
- https://www.tenda.com.cn/
- https://github.com/Robots10/IoT_vlu/blob/main/reports/Tenda/formPortalAuth/formPortalAuth.md