CVE-2025-44865 | Tenda W20E 15.11.0.6 formSetDebugCfg enable command injection

A vulnerability was found in Tenda W20E 15.11.0.6. It has been declared as critical. This vulnerability affects the function formSetDebugCfg. The manipulation of the argument enable leads to command injection.

This vulnerability was named CVE-2025-44865. The attack can be initiated remotely. There is no exploit available.