Description
A vulnerability was identified in Tenda W20E 15.11.0.6(1068_1546_841)_CN_TDC. This issue affects the function lstAdd of the file /goform/editQos of the component QoS Edit. Such manipulation of the argument qosListConnecttedNum leads to stack-based buffer overflow. The attack may be launched remotely. The exploit is publicly available and might be used.
Published: 2026-08-14
Score: 8.7 High
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

A stack-based buffer overflow exists in the lstAdd function of the /goform/editQos component on Tenda W20E routers. Manipulating the qosListConnecttedNum argument can overwrite stack memory, potentially allowing an attacker to execute arbitrary code. The vulnerability is classified as CWE-119 and CWE-121 and can be exploited remotely by sending crafted HTTP requests.

Affected Systems

The flaw affects the Tenda W20E router firmware 15.11.0.6(1068_1546_841)_CN_TDC. Only this specific firmware revision is known to be vulnerable; newer releases may already contain a fix.

Risk and Exploitability

The CVSS score of 8.7 indicates a high severity risk. EPSS data is not available, and the vulnerability is not listed in the CISA KEV catalog, but the exploit is publicly available and can be launched from outside the network. The attack typically involves sending a malformed request to /goform/editQos, causing a stack overflow that could lead to remote code execution.

Generated by OpenCVE AI on August 14, 2026 at 12:30 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Update the router to the latest Tenda firmware that contains a fix for this issue
  • If no firmware update is available, block or restrict external access to the /goform/editQos endpoint using firewall rules or access‑control lists
  • Monitor the device’s logs and network traffic for abnormal QoS configuration requests and intervene if suspicious activity is detected

Generated by OpenCVE AI on August 14, 2026 at 12:30 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 14 Aug 2026 15:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Fri, 14 Aug 2026 13:00:00 +0000

Type Values Removed Values Added
First Time appeared Tenda w20e
Vendors & Products Tenda w20e

Fri, 14 Aug 2026 11:45:00 +0000

Type Values Removed Values Added
Description A vulnerability was identified in Tenda W20E 15.11.0.6(1068_1546_841)_CN_TDC. This issue affects the function lstAdd of the file /goform/editQos of the component QoS Edit. Such manipulation of the argument qosListConnecttedNum leads to stack-based buffer overflow. The attack may be launched remotely. The exploit is publicly available and might be used.
Title Tenda W20E QoS Edit editQos lstAdd stack-based overflow
First Time appeared Tenda
Tenda w20e Firmware
Weaknesses CWE-119
CWE-121
CPEs cpe:2.3:o:tenda:w20e_firmware:*:*:*:*:*:*:*:*
Vendors & Products Tenda
Tenda w20e Firmware
References
Metrics cvssV2_0

{'score': 9, 'vector': 'AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR'}

cvssV3_0

{'score': 8.8, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R'}

cvssV3_1

{'score': 8.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R'}

cvssV4_0

{'score': 8.7, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P'}

Subscriptions

Tenda W20e W20e Firmware
cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published:

Updated: 2026-08-14T14:53:31.615Z

Reserved: 2026-08-14T05:30:15.673Z

Link: CVE-2026-19822

cve-icon Vulnrichment

Updated: 2026-08-14T14:53:24.665Z

cve-icon NVD

Status : Deferred

Published: 2026-08-14T12:16:43.577

Modified: 2026-08-14T19:09:56.813

Link: CVE-2026-19822

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-14T12:45:17Z

Weaknesses
  • CWE-119

    Improper Restriction of Operations within the Bounds of a Memory Buffer

  • CWE-121

    Stack-based Buffer Overflow