CVE-2026-19791: Tenda G0 httpd web management interface module addStaticRoute stack-based overflow
A weakness has been identified in Tenda G0 up to 20260625. The affected element is the function addStaticRoute of the file /goform/module of the component httpd web management interface. Executing a manipulation of the argument staticRouteNet can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-19791?
The severity of CVE-2026-19791 is rated as high with a score of 8.8.
How do I fix CVE-2026-19791?
To fix CVE-2026-19791, update Tenda G0 to a version released after the 20260625 patch.
What type of vulnerability is CVE-2026-19791?
CVE-2026-19791 is a stack-based buffer overflow vulnerability in the Tenda G0 httpd web management interface.
Who is affected by CVE-2026-19791?
Users of Tenda G0 versions up to 20260625 are affected by CVE-2026-19791.
What could be the potential impact of CVE-2026-19791?
The potential impact of CVE-2026-19791 includes remote code execution due to the stack-based overflow.