CVE-2026-51844
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk28th percentile - higher than 28% of all known CVEs
Summary
A stack buffer overflow vulnerability was discovered in the Tenda AC7 router firmware version 15.03.06.44 in the /goform/AdvSetMacMtuWan interface via the cloneType parameter. An attacker can exploit this flaw to execute arbitrary code remotely or cause a denial of service.
Risk Assessment
The risk involves potential remote code execution or device crash, leading to network disruption and potential data confidentiality breaches for traffic passing through the router.
Recommendation
Immediately update the Tenda AC7 firmware to the latest version if a patch is available. If no update exists, restrict management interface access to trusted networks only.
Original NVD description (English source)
Tenda AC7 v15.03.06.44 contains a stack buffer overflow vulnerability in the /goform/AdvSetMacMtuWan interface via the cloneType parameter.