CVE-2025-7586 | Tenda AC500 2.0.1.9(1307) /goform/setWtpData formSetAPCfg radio_2g_1 stack-based overflow

A vulnerability was found in Tenda AC500 2.0.1.9(1307). It has been declared as critical. Affected by this vulnerability is the function formSetAPCfg of the file /goform/setWtpData. The manipulation of the argument radio_2g_1 leads to stack-based buffer overflow.

This vulnerability is known as CVE-2025-7586. The attack can be launched remotely. Furthermore, there is an exploit available.