Tenda A18 vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Tenda A18: 3 record(s), with affected versions and fixes.
CVE-2026-2930
High · 8.8
CWE-119 Feb 22, 2026
Tenda A18 Httpd Service UploadCfg webCgiGetUploadFile stack-based overflow
A vulnerability was identified in Tenda A18 15.13.07.13. The affected element is the function webCgiGetUploadFile of the file /cgi-bin/UploadCfg of the component Httpd Service. Such manipulation of the argument boundary leads to stack-based buffer overflow. The attack can be executed remotely. The exploit is publicly available and might be used.
CVE-2026-2877
High · 8.8
CWE-119 Feb 21, 2026
Tenda A18 Httpd Service WifiExtraSet strcpy stack-based overflow
A vulnerability has been found in Tenda A18 15.13.07.13. This affects the function strcpy of the file /goform/WifiExtraSet of the component Httpd Service. The manipulation of the argument wpapsk_crypto5g leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVE-2026-2876
High · 8.8
CWE-119 Feb 21, 2026
Tenda A18 setBlackRule parse_macfilter_rule stack-based overflow
A vulnerability was determined in Tenda A18 15.13.07.13. This affects the function parse_macfilter_rule of the file /goform/setBlackRule. This manipulation of the argument deviceList causes stack-based buffer overflow. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized.