CVE-2026-19822 | Tenda W20E 15.11.0.6(1068_1546_841)_CN_TDC QoS Edit /goform/editQos lstAdd qosListConnecttedNum stack-based overflow

A vulnerability described as critical has been identified in Tenda W20E 15.11.0.6(1068_1546_841)_CN_TDC. This issue affects the function lstAdd of the file /goform/editQos of the component QoS Edit. Such manipulation of the argument qosListConnecttedNum leads to stack-based buffer overflow.

This vulnerability is traded as CVE-2026-19822. The attack may be launched remotely. Furthermore, there is an exploit available.