CVE-2026-19792: Tenda G0 httpd web management interface module setPortMapping buffer overflow
A security flaw has been discovered in Tenda G0 up to 20260625. Impacted is the function setPortMapping of the file /goform/module of the component httpd web management interface. Performing a manipulation of the argument portMappingServer/porMappingtInternal/portMappingExternal results in buffer overflow. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-19792?
The severity of CVE-2026-19792 is high with a score of 8.8.
What kind of vulnerability is described in CVE-2026-19792?
CVE-2026-19792 is a buffer overflow vulnerability found in the setPortMapping function of the Tenda G0 httpd web management interface.
How can I mitigate the risks associated with CVE-2026-19792?
To mitigate the risks of CVE-2026-19792, ensure you update to the latest version of Tenda G0 that fixes this buffer overflow vulnerability.
Which version of Tenda G0 is affected by CVE-2026-19792?
CVE-2026-19792 affects Tenda G0 versions up to and including 20260625.
What could happen if CVE-2026-19792 is exploited?
Exploitation of CVE-2026-19792 could allow an attacker to execute arbitrary code in the context of the affected process due to the buffer overflow.