Tenda AC19 saveParentControlInfo heap-based overflow

Summary

A vulnerability was determined in Tenda AC19 16.03.10.07. Affected by this issue is the function saveParentControlInfo of the file /goform/saveParentControlInfo. This manipulation of the argument deviceId causes heap-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.

Remediation

1. Inventory every Tenda AC19 deployment, including staging.
2. No fixed version appears in the public sources yet. Check the references below and the vendor directly.

References

• Advisoryhttps://vuldb.com/cve/CVE-2026-123966
• Advisoryhttps://vuldb.com/submit/1035173
• Referencehttps://vuldb.com/vuln/432038
• Referencehttps://vuldb.com/vuln/432038/cti
• Referencehttps://github.com/Tmzop/Tenda-AC19-saveParentControlInfo/blob/main/report.md
• Referencehttps://www.tenda.com.cn/