CVE-2025-14994 | Tenda HTTP Request /goform/webtypelibrary strcat stack-based overflow

A vulnerability was found in Tenda. It has been rated as critical. This impacts the function strcat of the file /goform/webtypelibrary of the component HTTP Request Handler. This manipulation of the argument webSiteId causes stack-based buffer overflow.

This vulnerability is tracked as CVE-2025-14994. The attack is possible to be carried out remotely. Moreover, an exploit is present.

If you want to get best quality of vulnerability data, you may have to visit VulDB.