CVE-2026-6015 | Tenda AC9 15.03.02.13 POST Request /goform/QuickIndex formQuickIndex PPPOEPassword stack-based overflow

A vulnerability was found in Tenda AC9 15.03.02.13 and classified as critical. Impacted is the function formQuickIndex of the file /goform/QuickIndex of the component POST Request Handler. Such manipulation of the argument PPPOEPassword leads to stack-based buffer overflow.

This vulnerability is referenced as CVE-2026-6015. It is possible to launch the attack remotely. Furthermore, an exploit is available.