CVE-2026-90688

Name of the Vulnerable Software and Affected Versions Tenda W20E version 15.11.0.61068 1546 841 CN TDC

Description A stack-based buffer overflow exists in the HTTP Handler component. The issue occurs within the formIPMacBindAdd() function when processing the IPMacBindRule argument. This flaw allows a remote attacker to cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the formIPMacBindAdd() function to minimize the risk of exploitation.