CVE-2026-19824

Name of the Vulnerable Software and Affected Versions Tenda W20E version 15.11.0.6(1068 1546 841) CN TDC

Description A remote attack is possible due to a stack-based buffer overflow, which occurs when a buffer on the stack is overwritten. This issue exists in the ipMacBindListStore() function within the /goform/addIpMacBind endpoint when the IPMacBindRule variable is manipulated.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the /goform/addIpMacBind endpoint to minimize the risk of exploitation.