CVE-2026-51846
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk43th percentile - higher than 43% of all known CVEs
Summary
In Tenda AC7 firmware version 15.03.06.44, a stack buffer overflow vulnerability exists in the wanSpeed parameter of the /goform/AdvSetMacMtuWan route. This can lead to remote arbitrary code execution.
Risk Assessment
An attacker can remotely take control of the router, compromising network confidentiality and integrity, and potentially intercepting traffic.
Recommendation
Immediately update the Tenda AC7 firmware to the latest available version that fixes this vulnerability. If no update is available, restrict management interface access to trusted networks only.
Original NVD description (English source)
In Tenda AC7 v15.03.06.44, the wanSpeed parameter of the route /goform/AdvSetMacMtuWan has a stack buffer overflow vulnerability that can lead to remote arbitrary code execution.