CVE-2026-51934

Deferred Deferred - Pending Action

Buffer Overflow in Tenda A18 Router Firmware

Publication date: 2026-09-01

Last updated on: 2026-09-02

Assigner: MITRE

Description

Buffer Overflow vulnerability in Shenzhen Jixiang Tengda Technology Co., Ltd. Tenda A18 v.15.13.07.09 allows a remote attacker to execute arbitrary code via the fromSetCmdlineRun function

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-01

Last Modified

2026-09-02

Generated

2026-09-22

AI Q&A

2026-09-01

EPSS Evaluated

2026-09-20

NVD

CVE-2026-51934

EUVD

EUVD-2026-69391

Affected Vendors & Products

Vendor	Product	Version / Range
shenzhen_jixiang_tengda_technology_co_ltd	tenda_a18	15.13.07.09

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-120	The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

Attack-Flow Graph

Executive Summary

This is a Buffer Overflow vulnerability in the Tenda A18 router firmware version 15.13.07.09. It allows a remote attacker to execute arbitrary code by exploiting the fromSetCmdlineRun function.

Detection Guidance

To detect this vulnerability, inspect network traffic for POST requests targeting the Tenda A18 router's web interface. Look for the wpapsk_crypto5g parameter in requests where configured2_4g is not 'true' and configured5g is 'true'. Check if the input length exceeds 16 bytes for the wpapsk_cryptovalue array.

Impact Analysis

A remote attacker could exploit this to run malicious code on your device, potentially gaining control over the router, intercepting network traffic, or launching further attacks.

Compliance Impact

The vulnerability allows arbitrary code execution or denial of service via a buffer overflow in the Tenda A18 router. This could lead to unauthorized access to sensitive data, potentially violating GDPR's data protection requirements and HIPAA's security rules for protected health information.

Mitigation Strategies

Immediately update the Tenda A18 firmware to the latest version if a patch is available. If no patch exists, consider isolating the device from the network or disabling remote access to prevent exploitation.

Hi! I’m here to help you understand CVE-2026-51934. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70