CVE-2026-51845
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk28th percentile - higher than 28% of all known CVEs
Summary
A stack buffer overflow vulnerability was discovered in the Tenda AC7 router firmware version 15.03.06.44 in the /goform/AdvSetMacMtuWan interface via the mac parameter. An attacker can remotely crash the device or potentially execute arbitrary code.
Risk Assessment
The risk includes potential remote code execution on the router, which could lead to network compromise, traffic interception, or using the device as an entry point for further attacks.
Recommendation
Immediately update the Tenda AC7 firmware to the latest available version if a patch is released. If no update is available, restrict administrative interface access to trusted networks only.
Original NVD description (English source)
Tenda AC7 v15.03.06.44 contains a stack buffer overflow vulnerability in the /goform/AdvSetMacMtuWan interface via the mac parameter.