Live › vulnerability › CVE-2026-113744
Go to dashboardStack-based buffer overflow in formSetFirewallCfg (/goform/SetFirewallCfg, argument firewallEn) in the httpd web management service of Tenda AC19 firmware 16.03.10.07. The CVE record rates it CVSS 10.0 with no privileges or user interaction. An exploit reference is public (GitHub) but no in-the-wild exploitation is reported. No vendor advisory or fixed firmware was found. Whether the endpoint needs a login is not stated by the sources.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
| Product | Ecosystem | Affected | Fixed in |
|---|
| Tenda AC19 | firmware | 16.03.10.07 | – |
16.03.10.07 is the only version confirmed affected; other versions are untested16.03.10.07Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A security vulnerability has been detected in Tenda AC19 16.03.10.07. The impacted element is the function formSetFirewallCfg of the file /goform/SetFirewallCfg of the component httpd Web Management Service. Such manipulation of the argument firewallEn leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed publicly and may be used.
This page as .md · .json · in your agent: get_signal("CVE-2026-113744")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.