CVE-2026-4490

Impact

A flaw has been found in Tenda A18 Pro 02.03.02.28. This issue affects the function setSchedWifi of the file /goform/openSchedWifi. This manipulation causes stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been published and may be used.

Affected packages

This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.

Weakness classification

References

• NVD record
• CVE.org record
• https://github.com/lilukun337/cve/issues/2
• https://vuldb.com/?ctiid.352016
• https://vuldb.com/?id.352016
• https://vuldb.com/?submit.773670
• https://www.tenda.com.cn/