PULSE
LIVE47signals / 24h
ES
FEED
ransomqilin reclama a Community Management Associates · US · Professional Servicesransomthegentlemen reclama a Las Cenizas · CL · Otherransomthegentlemen reclama a Kenaitze Indian Tribe · US · Government & Defenseransomthegentlemen reclama a Additive Manufacturing · US · Manufacturingransomthegentlemen reclama a Salem Saleh Babgi · SA · Not Foundransomthegentlemen reclama a Salama Medicals Distributors Private · TZ · Healthcareransomthegentlemen reclama a Krafman · SE · Manufacturingransomthegentlemen reclama a Kosh Innovations · Not Foundransomthegentlemen reclama a Saturn Industries · Manufacturingransomthegentlemen reclama a Acosta Sons · US · Agriculture and Food Productionransomthegentlemen reclama a CFS · US · Financial Servicesransomthegentlemen reclama a OHK Energy · SG · Energy & Utilitiesransomthegentlemen reclama a Hutch Paving · US · Transportationransomthegentlemen reclama a CRB group · BR · Professional Servicesransomqilin reclama a Community Management Associates · US · Professional Servicesransomthegentlemen reclama a Las Cenizas · CL · Otherransomthegentlemen reclama a Kenaitze Indian Tribe · US · Government & Defenseransomthegentlemen reclama a Additive Manufacturing · US · Manufacturingransomthegentlemen reclama a Salem Saleh Babgi · SA · Not Foundransomthegentlemen reclama a Salama Medicals Distributors Private · TZ · Healthcareransomthegentlemen reclama a Krafman · SE · Manufacturingransomthegentlemen reclama a Kosh Innovations · Not Foundransomthegentlemen reclama a Saturn Industries · Manufacturingransomthegentlemen reclama a Acosta Sons · US · Agriculture and Food Productionransomthegentlemen reclama a CFS · US · Financial Servicesransomthegentlemen reclama a OHK Energy · SG · Energy & Utilitiesransomthegentlemen reclama a Hutch Paving · US · Transportationransomthegentlemen reclama a CRB group · BR · Professional Services
← All CVEs
CVE WatchJul 31, 2026

CVE-2026-67822

Tenda W6-S 1.0.0.4(510) contains a stack-based buffer overflow vulnerability in the /goform/wifiSSIDset endpoint. The function formwrlSSIDse

CVSS

—

No CVSS

EPSS

—

KEV

—

Exploit Today

—

0-100

Published: Jul 31, 2026 · Last modified: Jul 31, 2026

EPSS · 30d

Not enough EPSS history yet.

Technical description

Tenda W6-S 1.0.0.4(510) contains a stack-based buffer overflow vulnerability in the /goform/wifiSSIDset endpoint. The function formwrlSSIDset uses sprintf to copy user-controlled 'GO' and 'index' parameters into a 64-byte stack buffer without length restriction, leading to stack overflow.

Official references
Related CVEs

No related CVEs by CWE or product.