Ac5 Firmware
Approved changes feed: RSS · Atom
cpe:2.3:o:tenda:ac5_firmware:*:*:*:*:*:*:*:*
part: o version: * update: *
| Vendor | Tenda (cebb1c0a-7ddd-5bf6-9fc6-52b2b4f8dd42) |
|---|---|
| Product | Ac5 Firmware (dd7ae851-aa59-5403-93eb-c9432591e3cb) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-4906 |
vulnerable | 2026-06-08 08:07:02.633730 |
Tenda AC5 POST Request WizardHandle decodePwd stack-based overflow
HIGH (8.8)
A vulnerability was determined in Tenda AC5 15.03.06.47. The affected element is the function decodePwd of the file /goform/WizardHandle of the component POST Request Handler. Executing a manipulation of the argument WANT/WANS can lead to stack-based buffer overflow. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized.
Published: 2026-03-27T00:53:09.317Z
Updated: 2026-03-30T11:56:56.348Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-4905 |
vulnerable | 2026-06-08 08:07:02.633113 |
Tenda AC5 POST Request WifiWpsOOB formWifiWpsOOB stack-based overflow
HIGH (8.8)
A vulnerability was found in Tenda AC5 15.03.06.47. Impacted is the function formWifiWpsOOB of the file /goform/WifiWpsOOB of the component POST Request Handler. Performing a manipulation of the argument index results in stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been made public and could be used.
Published: 2026-03-26T23:11:11.087Z
Updated: 2026-03-27T11:27:29.101Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-4904 |
vulnerable | 2026-06-08 08:07:02.632615 |
Tenda AC5 POST Request setcfm formSetCfm stack-based overflow
HIGH (8.8)
A vulnerability has been found in Tenda AC5 15.03.06.47. This issue affects the function formSetCfm of the file /goform/setcfm of the component POST Request Handler. Such manipulation of the argument funcpara1 leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2026-03-26T23:11:07.350Z
Updated: 2026-03-27T20:08:51.398Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-4903 |
vulnerable | 2026-06-08 08:07:02.631966 |
Tenda AC5 POST Request QuickIndex formQuickIndex memory corruption
HIGH (8.8)
A flaw has been found in Tenda AC5 15.03.06.47. This vulnerability affects the function formQuickIndex of the file /goform/QuickIndex of the component POST Request Handler. This manipulation of the argument PPPOEPassword causes stack-based buffer overflow. The attack may be initiated remotely. The exploit has been published and may be used.
Published: 2026-03-26T22:30:18.420Z
Updated: 2026-03-27T20:00:27.001Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-4902 |
vulnerable | 2026-06-08 08:07:02.629355 |
Tenda AC5 POST Request addressNat fromAddressNat memory corruption
HIGH (8.8)
A vulnerability was detected in Tenda AC5 15.03.06.47. This affects the function fromAddressNat of the file /goform/addressNat of the component POST Request Handler. The manipulation of the argument page results in stack-based buffer overflow. The attack can be launched remotely. The exploit is now public and may be used.
Published: 2026-03-26T22:30:14.537Z
Updated: 2026-03-27T13:54:48.568Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.