CVE-2026-90688
Received Received - Intake

Stack-Based Buffer Overflow in Tenda W20E Router

Publication date: 2026-09-14

Last updated on: 2026-09-14

Assigner: VulDB

Description
A vulnerability was identified in Tenda W20E 15.11.0.61068_1546_841_CN_TDC. This issue affects the function formIPMacBindAdd of the component HTTP Handler. Such manipulation of the argument IPMacBindRule leads to stack-based buffer overflow. It is possible to launch the attack remotely.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-14
Last Modified
2026-09-14
Generated
2026-09-14
AI Q&A
2026-09-14
EPSS Evaluated
N/A
NVD
CVE-2026-90688
EUVD
EUVD-2026-77306

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
tenda w20e 15.11.0.61068

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-121 A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).
CWE-119 The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a stack-based buffer overflow in the Tenda W20E router's HTTP handler function formIPMacBindAdd. It occurs when the function processes the IPMacBindRule argument without proper length validation, allowing attacker-controlled input to overflow fixed-size stack buffers. The issue stems from unsafe strcpy operations that copy oversized data, leading to memory corruption.

Detection Guidance

Detecting this vulnerability requires checking for the Tenda W20E router with firmware version V15.11.0.61068. Inspect the router's web interface or use network scanning tools like nmap to identify the device and its firmware version. Look for the HTTP handler formIPMacBindAdd as a potential entry point for exploitation.

Impact Analysis

An attacker could remotely exploit this flaw to crash the router's web management process, potentially causing denial of service. In severe cases, it might allow arbitrary code execution, enabling unauthorized access or control of the device. This could lead to network disruption or compromise of connected systems.

Mitigation Strategies

Immediately update the Tenda W20E router to the latest firmware if an update is available. Disable remote access to the router's web management interface if not required. Monitor network traffic for unusual activity targeting the HTTP handler formIPMacBindAdd. Consider replacing the device if no patch is provided by Tenda.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-90688. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart