Description
A security flaw has been discovered in Tenda W20E 15.11.0.6(1068_1546_841)_CN_TDC. Impacted is the function formQOSRuleDel of the file /goform/delQos of the component QoS Rule Deletion. Performing a manipulation of the argument qosIndex results in stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks.
Published: 2026-08-14
Score: 8.7 High
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

A stack‑based buffer overflow exists in the formQOSRuleDel handler of the /goform/delQos endpoint on Tenda W20E routers. The vulnerability is triggered by manipulating the qosIndex parameter. If exploited, it can allow an attacker to execute arbitrary code with the privileges of the device, compromising confidentiality, integrity, and availability.

Affected Systems

The flaw affects Tenda W20E routers running firmware 15.11.0.6 (build 1068_1546_841) in the CN_TDC variant. Only that firmware version is listed as vulnerable; newer releases are not mentioned as affected.

Risk and Exploitability

The CVSS score of 8.7 indicates high severity, and the publicly released exploit shows that remote exploitation is feasible. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog. Attackers can target the device by issuing a crafted HTTP request to the /goform/delQos endpoint from outside the local network.

Generated by OpenCVE AI on August 14, 2026 at 13:50 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Apply the latest firmware update that fixes the formQOSRuleDel stack overflow.
  • If an update is unavailable, block external access to the /goform/delQos endpoint using a firewall or router ACL.
  • Disable the QoS feature entirely or restrict its configuration to local management to prevent remote modification.

Generated by OpenCVE AI on August 14, 2026 at 13:50 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 14 Aug 2026 13:45:00 +0000

Type Values Removed Values Added
First Time appeared Tenda w20e
Vendors & Products Tenda w20e

Fri, 14 Aug 2026 12:30:00 +0000

Type Values Removed Values Added
Description A security flaw has been discovered in Tenda W20E 15.11.0.6(1068_1546_841)_CN_TDC. Impacted is the function formQOSRuleDel of the file /goform/delQos of the component QoS Rule Deletion. Performing a manipulation of the argument qosIndex results in stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks.
Title Tenda W20E QoS Rule Deletion delQos formQOSRuleDel stack-based overflow
First Time appeared Tenda
Tenda w20e Firmware
Weaknesses CWE-119
CWE-121
CPEs cpe:2.3:o:tenda:w20e_firmware:*:*:*:*:*:*:*:*
Vendors & Products Tenda
Tenda w20e Firmware
References
Metrics cvssV2_0

{'score': 9, 'vector': 'AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR'}

cvssV3_0

{'score': 8.8, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R'}

cvssV3_1

{'score': 8.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R'}

cvssV4_0

{'score': 8.7, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P'}

Subscriptions

Tenda W20e W20e Firmware
cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published:

Updated: 2026-08-14T12:15:10.480Z

Reserved: 2026-08-14T05:30:19.659Z

Link: CVE-2026-19823

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-08-14T13:17:37.763

Modified: 2026-08-14T13:17:37.763

Link: CVE-2026-19823

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-14T13:30:04Z

Weaknesses
  • CWE-119

    Improper Restriction of Operations within the Bounds of a Memory Buffer

  • CWE-121

    Stack-based Buffer Overflow