CVE-2026-90689

Name of the Vulnerable Software and Affected Versions Tenda W20E version 15.11.0.61068 1546 841 CN TDC

Description A security flaw exists in the formDelWebAuthWhiteUser() function that allows a remote attacker to cause a stack-based buffer overflow. This occurs when the webAuthWhiteUserIndex argument is manipulated, potentially impacting the confidentiality, integrity, and availability of the protected information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting access to the formDelWebAuthWhiteUser() function to minimize the risk of exploitation.