CVE-2026-11528
HighCVSS 8.8Summary
A vulnerability was found in Tenda AC18 version 15.03.05.05, affecting the function sub_45304 in the file /goform/getRebootStatus of the Web Management Interface. Manipulation of the callback argument results in stack-based buffer overflow.
Risk Assessment
An attacker may remotely exploit this vulnerability, posing a serious threat to the security of the device and the network it is installed in.
Recommendation
It is recommended to update the device firmware to the latest version to mitigate this vulnerability and to monitor logs for potential attack attempts.
Original NVD description (English source)
A vulnerability was found in Tenda AC18 15.03.05.05. The affected element is the function sub_45304 of the file /goform/getRebootStatus of the component Web Management Interface. The manipulation of the argument callback results in stack-based buffer overflow. The attack may be launched remotely. The exploit has been made public and could be used.