CVE-2026-67822

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-07-31 · updated 2026-08-31
Weakness: CWE-121

Description

Tenda W6-S 1.0.0.4(510) contains a stack-based buffer overflow vulnerability in the /goform/wifiSSIDset endpoint. The function formwrlSSIDset uses sprintf to copy user-controlled 'GO' and 'index' parameters into a 64-byte stack buffer without length restriction, leading to stack overflow.

References

https://github.com/Tristerjh/Tenda/blob/main/Tenda_W6-S_GO_overflow.md
https://github.com/Tristerjh/Tenda/blob/main/Tenda_W6-S_GO_overflow.md

Get alerted when CVE-2026-67822 or the next vulnerability affects your stack