EXPOSURES › CVE-2026-51846

CVE-2026-51846

CRITICAL

DETAIL

SourceNVD · cve Published2026-06-19 CVSS9.8 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2026-51846 ↗

⚡ RCE ◐ ZERO-DAY SHAME 50/100 rcezero-day

In Tenda AC7 v15.03.06.44, the wanSpeed parameter of the route /goform/AdvSetMacMtuWan has a stack buffer overflow vulnerability that can lead to remote arbitrary code execution.

▸ RECOMMENDED ACTION Remote code execution — patch the affected products on priority.

PLAYERS IMPLICATED

tenda · vendor ac7 · product ac7 firmware · product

DESCRIPTION

In Tenda AC7 v15.03.06.44, the wanSpeed parameter of the route /goform/AdvSetMacMtuWan has a stack buffer overflow vulnerability that can lead to remote arbitrary code execution.

AFFECTED FEDRAMP PRODUCTS · 0

No correlated FedRAMP products.