CVE-2025-9088 | Tenda AC20 16.03.08.12 formSetVirtualSer save_virtualser_data list stack-based overflow

A vulnerability was found in Tenda AC20 16.03.08.12. It has been rated as critical. This vulnerability affects the function save_virtualser_data of the file /goform/formSetVirtualSer. The manipulation of the argument list leads to stack-based buffer overflow.

This vulnerability was named CVE-2025-9088. The attack can be initiated remotely. Furthermore, there is an exploit available.