CVE-2025-11324 | Tenda AC18 15.03.05.19(6318) /goform/setNotUpgrade newVersion stack-based overflow

October 5, 2025 Yanac

A vulnerability described as critical has been identified in Tenda AC18 15.03.05.19(6318). Affected by this vulnerability is an unknown functionality of the file /goform/setNotUpgrade. Such manipulation of the argument newVersion leads to stack-based buffer overflow.

This vulnerability is documented as CVE-2025-11324. The attack can be executed remotely. Additionally, an exploit exists.VulDB Recent EntriesRead More