CVE-2026-4902

Name of the Vulnerable Software and Affected Versions Tenda AC5 version 15.03.06.47

Description A flaw exists in the Tenda AC5 version 15.03.06.47 device. This issue is located within the POST Request Handler component, specifically in the fromAddressNat function of the /goform/addressNat file. Manipulation of the page argument can trigger a stack-based buffer overflow. The attack can be initiated remotely. An exploit for this issue is publicly available.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.