CVE-2026-24111: Buffer Overflow
An issue was discovered in Tenda W20E V4.0brV15.11.0.6. Attackers may exploit the vulnerability by specifying the value of userInfo. When userInfo is passed into the addAuthUser function and processed by sscanf without size validation, it could lead to buffer overflow.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-24111?
CVE-2026-24111 is considered critical due to the potential for buffer overflow leading to remote code execution.
How do I fix CVE-2026-24111?
To fix CVE-2026-24111, update the Tenda W20E device firmware to the latest version that addresses this vulnerability.
What product is affected by CVE-2026-24111?
CVE-2026-24111 affects the Tenda W20E V4.0br with firmware version 15.11.0.6.
Can CVE-2026-24111 be exploited remotely?
Yes, CVE-2026-24111 can be exploited remotely by attackers who manipulate the `userInfo` parameter.
What type of vulnerability is CVE-2026-24111?
CVE-2026-24111 is a buffer overflow vulnerability that occurs due to insufficient size validation in the `addAuthUser` function.