CVE-2026-90688

Deferred Deferred - Pending Action

Stack-Based Buffer Overflow in Tenda W20E Router

Publication date: 2026-09-14

Last updated on: 2026-09-15

Assigner: VulDB

Description

A vulnerability was identified in Tenda W20E 15.11.0.61068_1546_841_CN_TDC. This issue affects the function formIPMacBindAdd of the component HTTP Handler. Such manipulation of the argument IPMacBindRule leads to stack-based buffer overflow. It is possible to launch the attack remotely.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-14

Last Modified

2026-09-15

Generated

2026-10-04

AI Q&A

2026-09-14

EPSS Evaluated

2026-10-03

NVD

CVE-2026-90688

EUVD

EUVD-2026-77306

Affected Vendors & Products

Vendor	Product	Version / Range
tenda	w20e	15.11.0.61068
tenda	w20e	to 15.11.0.61068 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-121	A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).
CWE-119	The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

Attack-Flow Graph

Executive Summary

This vulnerability is a stack-based buffer overflow in the Tenda W20E router's HTTP handler function formIPMacBindAdd. It occurs when the function processes the IPMacBindRule argument without proper length validation, allowing attacker-controlled input to overflow fixed-size stack buffers. The issue stems from unsafe strcpy operations that copy oversized data, leading to memory corruption.

Detection Guidance

Detecting this vulnerability requires checking for the Tenda W20E router with firmware version V15.11.0.61068. Inspect the router's web interface or use network scanning tools like nmap to identify the device and its firmware version. Look for the HTTP handler formIPMacBindAdd as a potential entry point for exploitation.

Impact Analysis

An attacker could remotely exploit this flaw to crash the router's web management process, potentially causing denial of service. In severe cases, it might allow arbitrary code execution, enabling unauthorized access or control of the device. This could lead to network disruption or compromise of connected systems.

Compliance Impact

This vulnerability could potentially impact compliance with GDPR and HIPAA by enabling remote code execution or unauthorized access to sensitive network devices. A stack-based buffer overflow in the Tenda W20E router's HTTP handler may allow attackers to execute arbitrary code, leading to data breaches or unauthorized system control. Such incidents could violate data protection requirements under GDPR (e.g., Article 32 security of processing) and HIPAA (e.g., safeguards for electronic protected health information).

Mitigation Strategies

Immediately update the Tenda W20E router to the latest firmware if an update is available. Disable remote access to the router's web management interface if not required. Monitor network traffic for unusual activity targeting the HTTP handler formIPMacBindAdd. Consider replacing the device if no patch is provided by Tenda.

Hi! I’m here to help you understand CVE-2026-90688. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70