CVE-2026-16248 | Tenda AC10 16.03.10.09_multi_TDE01 httpd/netctrl /goform/AdvSetLanip fromAdvSetLanip GetValue/SetValue stack-based overflow

July 20, 2026 Yanac

A vulnerability was found in Tenda AC10 16.03.10.09_multi_TDE01 and classified as critical. This issue affects the function fromAdvSetLanip of the file /goform/AdvSetLanip of the component httpd/netctrl. The manipulation of the argument GetValue/SetValue results in stack-based buffer overflow.

This vulnerability was named CVE-2026-16248. The attack may be performed from remote. In addition, an exploit is available.VulDB Recent EntriesRead More