CVE-2026-2886 | Tenda A21 1.0.0.0 /goform/SetOnlineDevName set_device_name devName stack-based overflow

A vulnerability was found in Tenda A21 1.0.0.0. It has been rated as critical. This affects the function set_device_name of the file /goform/SetOnlineDevName. This manipulation of the argument devName causes stack-based buffer overflow.

The identification of this vulnerability is CVE-2026-2886. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.