CVE-2026-4903 | Tenda AC5 15.03.06.47 POST Request /goform/QuickIndex formQuickIndex PPPOEPassword stack-based overflow

A vulnerability classified as critical has been found in Tenda AC5 15.03.06.47. This vulnerability affects the function formQuickIndex of the file /goform/QuickIndex of the component POST Request Handler. This manipulation of the argument PPPOEPassword causes stack-based buffer overflow.

This vulnerability appears as CVE-2026-4903. The attack may be initiated remotely. In addition, an exploit is available.