CVE-2026-19824
Received Received - Intake

Stack-Based Buffer Overflow in Tenda W20E Router

Publication date: 2026-08-14

Last updated on: 2026-08-14

Assigner: VulDB

Description
A weakness has been identified in Tenda W20E 15.11.0.6(1068_1546_841)_CN_TDC. The affected element is the function ipMacBindListStore of the file /goform/addIpMacBind. Executing a manipulation of the argument IPMacBindRule can lead to stack-based buffer overflow. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-14
Last Modified
2026-08-14
Generated
2026-08-14
AI Q&A
2026-08-14
EPSS Evaluated
N/A
NVD
CVE-2026-19824
EUVD
EUVD-2026-58655

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
tenda w20e 15.11.0.6

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-121 A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).
CWE-119 The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a stack-based buffer overflow vulnerability in the Tenda W20E router firmware version 15.11.0.6. The issue occurs in the ipMacBindListStore function of the /goform/addIpMacBind endpoint. When the IPMacBindRule parameter is processed, it is copied into a fixed-size 1024-byte buffer without proper length validation. Attackers can exploit this by sending a request with an overly long IPMacBindRule value, causing the buffer to overflow. This may lead to arbitrary code execution or denial-of-service on the device.

Detection Guidance

To detect this vulnerability, scan for devices running Tenda W20E firmware version 15.11.0.6(1068_1546_841)_CN_TDC. Check for open ports and services hosting the /goform/addIpMacBind endpoint. Use network scanners like Nmap to identify vulnerable devices by querying the specific function.

Impact Analysis

If exploited, this vulnerability could allow remote attackers to execute arbitrary code on your Tenda W20E router. This might enable them to take control of the device, steal sensitive information, or disrupt network operations. Additionally, the router could become unresponsive, leading to a denial-of-service condition.

Compliance Impact

This vulnerability could lead to unauthorized access or control of network devices, potentially exposing sensitive data. For GDPR, it may result in data breaches requiring notification under Article 33. For HIPAA, it could compromise protected health information if exploited on medical network devices.

Mitigation Strategies

Immediately update the Tenda W20E firmware to the latest patched version. If no patch is available, disable the /goform/addIpMacBind function or restrict access to trusted networks. Monitor network traffic for unusual requests targeting this endpoint.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-19824. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart