CVE-2026-2192: Tenda AC9 formGetRebootTimer stack-based overflow
A security vulnerability has been detected in Tenda AC9 15.03.06.42multi. Affected by this vulnerability is the function formGetRebootTimer. Such manipulation of the argument sys.schedulereboot.starttime/sys.schedulereboot.endtime leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed publicly and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-2192?
CVE-2026-2192 is classified as a high severity vulnerability due to the potential for stack-based overflow leading to arbitrary code execution.
How do I fix CVE-2026-2192?
To mitigate CVE-2026-2192, users should update their Tenda AC9 firmware to the latest version provided by the manufacturer.
What systems are affected by CVE-2026-2192?
CVE-2026-2192 specifically affects Tenda AC9 devices running firmware version 15.03.06.42_multi.
What is the impact of exploiting CVE-2026-2192?
Exploitation of CVE-2026-2192 can lead to unauthorized access and control over the affected Tenda AC9 router.
How does CVE-2026-2192 occur?
CVE-2026-2192 occurs through manipulation of the formGetRebootTimer function, particularly during the handling of reboot timer parameters.