CVE-2026-67967

CriticalCVSS 9.8

Published: 17/08/2026(UTC)Updated: 18/08/2026(UTC)Translated: 18/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.17%

7th percentile - higher than 7% of all known CVEs

Summary

A buffer overflow vulnerability in Tenda W20E V16.01.0.6(2782) allows an attacker to execute arbitrary code. This is an incomplete fix for CVE-2025-44867 and CVE-2026-36819.

Risk Assessment

A remote attacker can execute arbitrary code on the device, potentially leading to full compromise of the router and interception of network traffic.

Recommendation

Immediately update the Tenda W20E firmware if a newer version is available, and monitor vendor advisories.

Original NVD description (English source)

Buffer Overflow vulnerability in Tenda W20E V16.01.0.6(2782) allows an attacker to execute arbitrary code. This is an incomplete fix for CVE-2025-44867 and CVE-2026-36819