A vulnerability was found in Tenda AC7 15.03.06.44 and classified as critical. This issue affects the function formSetPPTPUserList of the file /goform/setPptpUserList. The manipulation of the argument list leads to buffer overflow.

The identification of this vulnerability is CVE-2025-5862. The attack may be initiated remotely. Furthermore, there is an exploit available.