Description
A vulnerability has been found in Tenda AC5 15.03.06.47. This issue affects the function formSetCfm of the file /goform/setcfm of the component POST Request Handler. Such manipulation of the argument funcpara1 leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2026-03-26
Score: 8.7 High
EPSS: < 1% Very Low
KEV: No
Impact: Remote code execution
Action: Immediate Patch
AI Analysis

Impact

A Tenda AC5 router running firmware 15.03.06.47 is vulnerable to a stack-based buffer overflow triggered by a specially crafted POST request to the /goform/setcfm endpoint. By manipulating the funcpara1 argument the attacker can overflow a stack buffer and potentially execute arbitrary code, giving remote control of the device and compromising confidentiality, integrity, and availability. The weakness involves out‑of‑bounds writes (CWE‑119, CWE‑121, CWE‑787).

Affected Systems

Affected are Tenda AC5 routers. The vulnerable firmware is version 15.03.06.47. No other firmware versions are listed as affected.

Risk and Exploitability

The CVSS score of 8.7 indicates a high severity vulnerability, and the EPSS score of less than 1% suggests a low likelihood of exploitation in the wild. The vulnerability is not currently listed in the CISA KEV catalog. However, the public disclosure of exploits means that remote attackers can reach the device over the network via an HTTP POST request to /goform/setcfm, so the risk remains if the device is exposed.

Generated by OpenCVE AI on April 1, 2026 at 06:46 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Apply the latest Tenda firmware update that addresses the /goform/setcfm buffer overflow.
  • If a firmware update is unavailable, block external access to the router’s administrative interface or the /goform/setcfm endpoint using a firewall or ACL.
  • Restrict access to the device to trusted internal networks and disable remote management features if not needed.
  • Monitor network traffic for unexpected POST requests to /goform/setcfm and log such events for further investigation.

Generated by OpenCVE AI on April 1, 2026 at 06:46 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 01 Apr 2026 02:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-787
CPEs cpe:2.3:h:tenda:ac5:1.0:*:*:*:*:*:*:*
cpe:2.3:o:tenda:ac5_firmware:15.03.06.47:*:*:*:*:*:*:*

Sat, 28 Mar 2026 03:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Fri, 27 Mar 2026 08:45:00 +0000

Type Values Removed Values Added
First Time appeared Tenda ac5
Vendors & Products Tenda ac5

Fri, 27 Mar 2026 04:00:00 +0000

Type Values Removed Values Added
Description A vulnerability has been found in Tenda AC5 15.03.06.47. This issue affects the function formSetCfm of the file /goform/setcfm of the component POST Request Handler. Such manipulation of the argument funcpara1 leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Title Tenda AC5 POST Request setcfm formSetCfm stack-based overflow
First Time appeared Tenda
Tenda ac5 Firmware
Weaknesses CWE-119
CWE-121
CPEs cpe:2.3:o:tenda:ac5_firmware:*:*:*:*:*:*:*:*
Vendors & Products Tenda
Tenda ac5 Firmware
References
Metrics cvssV2_0

{'score': 9, 'vector': 'AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR'}

cvssV3_0

{'score': 8.8, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R'}

cvssV3_1

{'score': 8.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R'}

cvssV4_0

{'score': 8.7, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P'}

Subscriptions

Tenda Ac5 Ac5 Firmware
cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published:

Updated: 2026-03-27T20:08:51.398Z

Reserved: 2026-03-26T15:57:56.353Z

Link: CVE-2026-4904

cve-icon Vulnrichment

Updated: 2026-03-27T20:08:47.906Z

cve-icon NVD

Status : Analyzed

Published: 2026-03-27T00:16:24.170

Modified: 2026-03-31T20:59:41.853

Link: CVE-2026-4904

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-04-02T07:56:07Z

Weaknesses