CVE-2026-19821

Name of the Vulnerable Software and Affected Versions Tenda AC12 version 15.03.06.23 multi TD01

Description A buffer overflow occurs in the httpd web management interface when the rebootTime argument is manipulated. This issue is located within the formSetRebootTimer() function of the /goform/SetSysAutoRebbotCfg endpoint and can be triggered remotely.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the /goform/SetSysAutoRebbotCfg endpoint to minimize the risk of exploitation.