Summary
generated automatically from NVD dataTenda AC19 version 16.03.10.07 contains a stack-based buffer overflow in the formSetFirewallCfg function of /goform/SetFirewallCfg, part of the httpd Web Management Service. Manipulating the firewallEn argument triggers the flaw, and it can be attacked remotely over the network. The NVD description notes that the exploit has been publicly disclosed, and the issue is rated CRITICAL with a CVSS v3.1 score of 10.0.
NVD description
A security vulnerability has been detected in Tenda AC19 16.03.10.07. The impacted element is the function formSetFirewallCfg of the file /goform/SetFirewallCfg of the component httpd Web Management Service. Such manipulation of the argument firewallEn leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed publicly and may be used.
EPSS · FIRST.org
0.62%probability of exploitation in the next 30 days
Higher than 49% of scored CVEs
EPSS (Exploit Prediction Scoring System) estimates, from observed exploitation activity, how likely a CVE is to be exploited in the next 30 days. It complements CVSS, which measures severity, not likelihood. Score of 2026-10-25, recomputed daily by FIRST.org.
In-depth analysis on cveo.tech
We've published a detailed analysis of this CVE — exploitation, IOCs and mitigation.
CVSS v3.1 Score
Information
- Published
- 21 oct. 2026
- Updated
- 21 oct. 2026
- Status
- Deferred
- Source
- cna@vuldb.com
Weaknesses (CWE)
Similar CVEs
Other vulnerabilities of type CWE-119
Monitor your products
Get automatic alerts for every new CVE affecting your equipment.