CVE-2026-51846: Tenda AC7 Firmware Stack Buffer Overflow in wanSpeed Parameter
CVE-2026-51846 is a stack-based buffer overflow in the wanSpeed parameter of the Tenda AC7 firmware version 15.03.06.44, according to the CVE record. The record describes the flaw as enabling remote arbitrary code execution and assigns a CVSS 3.1 base score of 9.8 (Critical). The CISA KEV catalog does not list this CVE, and no confirmed exploitation appears in the sources consulted.
Overview
CVE-2026-51846 describes a stack-based buffer overflow in the wanSpeed parameter of a web management route on the Tenda AC7 firmware version 15.03.06.44. The record classifies the weakness as CWE-121 and assigns a CVSS 3.1 base score of 9.8 (Critical).
Impact
The record states that the flaw can lead to remote arbitrary code execution. The CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H indicates a network attack vector, low complexity, no privileges required, no user interaction, and high impact to confidentiality, integrity and availability. These values are taken from the scoring in the record. The sources consulted do not describe the conditions under which the flaw is reachable in a real deployment.
Affected products and versions
- Tenda AC7 firmware (listed as 'Tenda Ac7 Firmware'), version 15.03.06.44.
The record lists only this version. Other firmware builds and hardware revisions are not identified in the sources consulted and should be treated as unknown.
Exploitation status
The CISA KEV catalog does not list this CVE according to the record, so active exploitation is not confirmed. No confirmed exploitation appears in the sources consulted. The record links a third-party advisory tagged 'Exploit'. That tag does not by itself confirm active exploitation or the public availability of a working exploit, and it has not been verified here.
Remediation and mitigation
- The record lists no fixed version. The absence of fix data does not mean that no fix exists. Check Tenda's official support channels for firmware updates for AC7 devices.
- Until an update is verified, reduce exposure. Restrict access to the device's web management interface, disable remote management from the WAN side, and keep the device on a controlled network segment.
- Inventory all AC7 devices and confirm their firmware versions.
- If no vendor update is available, plan replacement of devices that are no longer supported.
Detection guidance
- Review firmware versions across the device inventory and flag any device reporting 15.03.06.44.
- Monitor available logs for unexpected restarts, unauthorized configuration changes, or unusual activity on the management interface.
- Watch for unexpected outbound connections originating from edge network devices.
Limitations of the available information
The record provides a short description, an NVD CVSS score, and a CNA-published entry. It does not include a vendor advisory, a fixed version, technical details of the vulnerable code path, EPSS or SSVC data, or a KEV entry. The record does not state whether the vulnerable route is reachable without authentication in default configurations. The statements about attack vector and privileges come from the CVSS vector and are an inference, not a vendor confirmation.
Frequently asked questions
Is CVE-2026-51846 known to be actively exploited?
The record shows that this CVE is not listed in the CISA KEV catalog. No confirmed exploitation appears in the sources consulted. A third-party reference is tagged 'Exploit', but that tag has not been verified as evidence of active exploitation.
Which versions are affected?
The record lists Tenda AC7 firmware version 15.03.06.44. Other versions are not identified in the sources consulted.
Is there a fixed version?
The record does not list a fixed version. Check Tenda's official support channels for updates.
This analysis was drafted with AI assistance from verified source data and automatically checked against it.