CVE-2026-4904 | Tenda AC5 15.03.06.47 POST Request /goform/setcfm formSetCfm funcpara1 stack-based overflow

A vulnerability classified as critical was found in Tenda AC5 15.03.06.47. This issue affects the function formSetCfm of the file /goform/setcfm of the component POST Request Handler. Such manipulation of the argument funcpara1 leads to stack-based buffer overflow.

This vulnerability is traded as CVE-2026-4904. The attack may be launched remotely. Furthermore, there is an exploit available.