CVE-2026-51846

Severity

critical

Source

NVD · cve

Published

2026-06-19

CVSS

9.8

Reference

https://nvd.nist.gov/vuln/detail/CVE-2026-51846

⚡ RCE shame 50/100 rce

In Tenda AC7 v15.03.06.44, the wanSpeed parameter of the route /goform/AdvSetMacMtuWan has a stack buffer overflow vulnerability that can lead to remote arbitrary code execution.

Players implicated

tenda · vendor ac7 · product ac7 firmware · product

Description

In Tenda AC7 v15.03.06.44, the wanSpeed parameter of the route /goform/AdvSetMacMtuWan has a stack buffer overflow vulnerability that can lead to remote arbitrary code execution.

Affected FedRAMP products 0 in the catalog

No correlated FedRAMP products.