CVE-2026-51934
Buffer Overflow vulnerability in Shenzhen Jixiang Tengda Technology Co., Ltd. Tenda A18 v.15.13.07.09 allows a remote attacker to execute ar
CVSS
9.8
Critical
EPSS
0.3%
p22
KEV
—
Exploit Today
7
0-100
Published: Sep 1, 2026 · Last modified: Sep 2, 2026 · CWE-120
Not enough EPSS history yet.
Buffer Overflow vulnerability in Shenzhen Jixiang Tengda Technology Co., Ltd. Tenda A18 v.15.13.07.09 allows a remote attacker to execute arbitrary code via the fromSetCmdlineRun function
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-737747.6 HIG8.8%
——3A buffer overflow vulnerability exists in the underlying operating system of AOS-CX that could lead to unauthenticated disclosure of sensitive information by sending specially crafted packets to the affected system. Successful exploitation of this vulnerability could result in limited disclosure or modification of information and disruption of the affected system.1dCVE-2026-737726.5 MED7.7%
——2Buffer overflow vulnerabilities exist in an underlying service of AOS-CX that could lead to an unauthenticated denial-of-service condition by sending specially crafted packets to the affected device. Successful exploitation of these vulnerabilities results in a disruption of normal operation of the underlying operating system.1dCVE-2026-9625—23.5%
——7A denial-of-service security issue exists within RSLinx® Classic. A crafted CIP packet with an oversized embedded message request can cause the RSLinx® Classic service to crash, requiring a restart of the service to recover.2dCVE-2026-841264.3 MED8.8%
——3Incorrect boundary conditions in the Layout: Grid component. This vulnerability was fixed in Firefox 155 and Thunderbird 155.2dCVE-2026-835968.8 HIG20.9%
——6A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling.2dCVE-2026-8254210.0 CRI48.4%
——15A weakness has been identified in Tenda HG10 300001138. Affected by this issue is the function formIPv6Routing of the file /boaform/admin/formIPv6Routing of the component Boa Web Server. This manipulation of the argument destNet causes buffer overflow. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks.2d