← Database

CVE-2026-9431

HIGH CVSS: 8.8 Published: 2026-05-25 Modified: 2026-07-23

Description

A vulnerability was identified in Tenda F1202 1.2.0.20(408). This affects the function fromPptpUserAdd of the file /goform/PptpUserAdd. The manipulation of the argument opttype leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit is publicly available and might be used.

Affected Platforms

Unknown

Weakness Type

CWE-119, CWE-121

References