CVE-2026-67822

CriticalCVSS 9.8

Published: 31/07/2026(UTC)Updated: 31/07/2026(UTC)Translated: 31/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.30%

22th percentile - higher than 22% of all known CVEs

Summary

The Tenda W6-S device version 1.0.0.4(510) has a stack-based buffer overflow vulnerability in the /goform/wifiSSIDset endpoint. The formwrlSSIDset function uses sprintf to copy user-controlled 'GO' and 'index' parameters into a 64-byte stack buffer without length restriction, leading to stack overflow.

Risk Assessment

An attacker can remotely crash the device or potentially execute arbitrary code, which could lead to full compromise of the network device.

Recommendation

Immediately update the Tenda W6-S firmware to the latest version that fixes this vulnerability, and restrict management interface access to trusted networks only.

Original NVD description (English source)

Tenda W6-S 1.0.0.4(510) contains a stack-based buffer overflow vulnerability in the /goform/wifiSSIDset endpoint. The function formwrlSSIDset uses sprintf to copy user-controlled 'GO' and 'index' parameters into a 64-byte stack buffer without length restriction, leading to stack overflow.