CVE-2026-6016 | Tenda AC9 15.03.02.13 POST Request /goform/WizardHandle decodePwd WANS stack-based overflow

A vulnerability was found in Tenda AC9 15.03.02.13. It has been classified as critical. The affected element is the function decodePwd of the file /goform/WizardHandle of the component POST Request Handler. Performing a manipulation of the argument WANS results in stack-based buffer overflow.

This vulnerability is identified as CVE-2026-6016. The attack can be initiated remotely. Additionally, an exploit exists.