CVE-2026-19824: Tenda W20E addIpMacBind ipMacBindListStore stack-based overflow
A weakness has been identified in Tenda W20E 15.11.0.6(10681546841)CNTDC. The affected element is the function ipMacBindListStore of the file /goform/addIpMacBind. Executing a manipulation of the argument IPMacBindRule can lead to stack-based buffer overflow. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-19824?
The severity of CVE-2026-19824 is high, with a score of 8.8.
How can CVE-2026-19824 be exploited?
CVE-2026-19824 can be exploited remotely by manipulating the argument IPMacBindRule, leading to a stack-based buffer overflow.
What product is affected by CVE-2026-19824?
CVE-2026-19824 affects the Tenda W20E with firmware version 15.11.0.6(1068_1546_841)_CN_TDC.
How do I fix CVE-2026-19824?
To fix CVE-2026-19824, update the Tenda W20E firmware to a version that addresses the stack-based buffer overflow vulnerability.
What type of vulnerability is CVE-2026-19824?
CVE-2026-19824 is classified as a buffer overflow vulnerability.