CVE-2026-51843

CriticalCVSS 9.8

Published: 19/06/2026(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.36%

28th percentile - higher than 28% of all known CVEs

Summary

A stack buffer overflow vulnerability exists in Tenda AC7 firmware version 15.03.06.44 in the /goform/AdvSetMacMtuWan interface via the wanMTU parameter. An attacker can remotely crash the device or potentially execute arbitrary code.

Risk Assessment

The risk includes remote code execution or denial of service (DoS), potentially leading to network integrity compromise and data confidentiality loss.

Recommendation

Immediately update the Tenda AC7 firmware to the latest available version, or apply temporary network security measures such as filtering traffic to the management interface.

Original NVD description (English source)

Tenda AC7 v15.03.06.44 contains a stack buffer overflow vulnerability in the /goform/AdvSetMacMtuWan interface via the wanMTU parameter.