A vulnerability categorized as critical has been discovered in Tenda AC20 16.03.08.12. This issue affects the function sub_48E628 of the file /goform/SetIpMacBind. The manipulation of the argument list leads to stack-based buffer overflow.

The identification of this vulnerability is CVE-2025-9089. The attack may be initiated remotely. Furthermore, there is an exploit available.