Stack-based Buffer Overflow in Tenda AC9 Router

CVE-2026-104611

What is CVE-2026-104611?

A vulnerability exists in the Tenda AC9 router, specifically in the POST Request Handler component found at /goform/fast_setting_internet_set. This vulnerability arises when an attacker manipulates the netWanType argument, leading to a stack-based buffer overflow. The exploit can be executed remotely, putting systems at risk of unauthorized access and potential data compromise. Given that the exploit is now public, immediate action is advised to mitigate risks associated with this security flaw.

References