CVE-2025-11586 | Tenda AC7 15.03.06.44 /goform/setNotUpgrade newVersion stack-based overflow

A vulnerability classified as critical has been found in Tenda AC7 15.03.06.44. This affects an unknown function of the file /goform/setNotUpgrade. This manipulation of the argument newVersion causes stack-based buffer overflow.

This vulnerability is tracked as CVE-2025-11586. The attack is possible to be carried out remotely. Moreover, an exploit is present.