CVE-2026-19823 | Tenda W20E 15.11.0.6(1068_1546_841)_CN_TDC QoS Rule Deletion /goform/delQos formQOSRuleDel qosIndex stack-based overflow

A vulnerability classified as critical has been found in Tenda W20E 15.11.0.6(1068_1546_841)_CN_TDC. Impacted is the function formQOSRuleDel of the file /goform/delQos of the component QoS Rule Deletion. Performing a manipulation of the argument qosIndex results in stack-based buffer overflow.

This vulnerability is known as CVE-2026-19823. Remote exploitation of the attack is possible. Furthermore, an exploit is available.