Search vulnerabilities

Results 1

Export CSV
CVE-2026-67822

Stack‑Based Buffer Overflow in Tenda W6‑S WiFi SSID Endpoint

Tenda W6-S 1.0.0.4(510) contains a stack-based buffer overflow vulnerability in the /goform/wifiSSIDset endpoint. The function formwrlSSIDset uses sprintf to copy user-controlled 'GO' and 'index' parameters into a 64-byte stack buffer without length restriction, leading to stack overflow.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Products