high8.8
CVE-2026-2886
A weakness has been identified in Tenda A21 1.0.0.0.
Impact
A weakness has been identified in Tenda A21 1.0.0.0. This affects the function set_device_name of the file /goform/SetOnlineDevName. This manipulation of the argument devName causes stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tenda | A21 Firmware | Version 1.0.0.0 |