CVE-2026-3400: Tenda AC15 TextEditingConversion stack-based overflow
A security flaw has been discovered in Tenda AC15 up to 15.13.07.13. Affected by this issue is some unknown functionality of the file /goform/TextEditingConversion. The manipulation of the argument wpapskcrypto24g results in stack-based buffer overflow. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-3400?
CVE-2026-3400 is rated as a high severity vulnerability due to its potential for stack-based buffer overflow.
How do I fix CVE-2026-3400?
To mitigate CVE-2026-3400, it is recommended to update Tenda AC15 to the latest firmware version beyond 15.13.07.13.
What does CVE-2026-3400 affect?
CVE-2026-3400 specifically affects the Tenda AC15 router and its handling of the wpapsk_crypto2_4g argument.
Can CVE-2026-3400 be exploited remotely?
Yes, CVE-2026-3400 can potentially be exploited remotely if the vulnerable functionality is exposed to the Internet.
What should I do if I am using Tenda AC15 with version 15.13.07.13?
If using Tenda AC15 with version 15.13.07.13, you should urgently update to a patched firmware version to protect against CVE-2026-3400.