Description
A vulnerability was detected in Tenda AC9 15.03.02.13. Affected is an unknown function of the file /goform/fast_setting_internet_set of the component POST Request Handler. Performing a manipulation of the argument netWanType results in stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit is now public and may be used.
Published: 2026-10-02
Score: 9.4 Critical
EPSS: < 1% Very Low
KEV: No
Impact: Remote Code Execution
Action: Immediate Patch
AI Analysis

Impact

A stack‑based buffer overflow exists in the POST request handler for /goform/fast_setting_internet_set on Tenda AC9 routers. Manipulating the argument netWanType can corrupt the stack, allowing an attacker to execute arbitrary code with the privilege context of the router’s firmware. The vulnerability is exploitable remotely and the exploit code is publicly available, meaning a determined adversary could compromise the device without any local access.

Affected Systems

Tenda AC9 routers running firmware version 15.03.02.13 are affected. The vulnerable functionality is exposed through the web interface endpoint /goform/fast_setting_internet_set, which is used to set internet connection parameters.

Risk and Exploitability

The CVSS score of 9.4 classifies this flaw as critical. EPSS is not available, so the exact current exploitation probability cannot be quantified, but the public availability of an exploit increases the risk. The vulnerability is not listed in KEV, yet its remote nature and severe impact warrant immediate attention. Attackers are likely to target the exposed POST endpoint over the Internet, sending a crafted netWanType value to trigger the overflow.

Generated by OpenCVE AI on October 2, 2026 at 13:31 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Update the router to a firmware version that removes the buffer overflow in /goform/fast_setting_internet_set.
  • Configure the router or upstream firewall to block remote HTTP POST traffic to /goform/fast_setting_internet_set or to limit all administration interface access to the local network loopback.
  • Disable remote administration or restrict the admin interface to trusted IP ranges if the firmware update is not yet available.

Generated by OpenCVE AI on October 2, 2026 at 13:31 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 02 Oct 2026 14:45:00 +0000

Type Values Removed Values Added
First Time appeared Tenda ac9
Vendors & Products Tenda ac9

Fri, 02 Oct 2026 14:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Fri, 02 Oct 2026 12:30:00 +0000

Type Values Removed Values Added
Description A vulnerability was detected in Tenda AC9 15.03.02.13. Affected is an unknown function of the file /goform/fast_setting_internet_set of the component POST Request Handler. Performing a manipulation of the argument netWanType results in stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit is now public and may be used.
Title Tenda AC9 POST Request fast_setting_internet_set stack-based overflow
First Time appeared Tenda
Tenda ac9 Firmware
Weaknesses CWE-119
CWE-121
CPEs cpe:2.3:o:tenda:ac9_firmware:*:*:*:*:*:*:*:*
Vendors & Products Tenda
Tenda ac9 Firmware
References
Metrics cvssV2_0

{'score': 8.3, 'vector': 'AV:N/AC:L/Au:M/C:C/I:C/A:C/E:POC/RL:ND/RC:UR'}

cvssV3_0

{'score': 9.1, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R'}

cvssV3_1

{'score': 9.1, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R'}

cvssV4_0

{'score': 9.4, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P'}

Subscriptions

Tenda Ac9 Ac9 Firmware
cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published:

Updated: 2026-10-02T13:30:49.550Z

Reserved: 2026-10-02T03:51:51.618Z

Link: CVE-2026-104611

cve-icon Vulnrichment

Updated: 2026-10-02T13:30:37.213Z

cve-icon NVD

Status : Deferred

Published: 2026-10-02T13:17:44.640

Modified: 2026-10-02T14:17:09.660

Link: CVE-2026-104611

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-02T14:30:23Z

Weaknesses
  • CWE-119

    Improper Restriction of Operations within the Bounds of a Memory Buffer

  • CWE-121

    Stack-based Buffer Overflow