← Database

CVE-2025-11586

HIGH CVSS: 8.8 Published: 2025-10-10 Modified: 2026-06-17

Description

A vulnerability was determined in Tenda AC7 15.03.06.44. This affects an unknown function of the file /goform/setNotUpgrade. This manipulation of the argument newVersion causes stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.

Affected Platforms

Tenda Ac7Tenda Ac7 Firmware

Weakness Type

CWE-119, CWE-121

References