CVE-2026-2191 | Tenda AC9 15.03.06.42_multi formGetDdosDefenceList security.ddos.map stack-based overflow

A vulnerability has been found in Tenda AC9 15.03.06.42_multi and classified as critical. Affected is the function formGetDdosDefenceList. This manipulation of the argument security.ddos.map causes stack-based buffer overflow.

This vulnerability appears as CVE-2026-2191. The attack may be initiated remotely. In addition, an exploit is available.