Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
An issue was discovered in /goform/WifiWpsStart in Tenda AC6V2.0 V15.03.06.23_multi. The index and mode are controllable. If the conditions are met to sprintf, they will be spliced into tmp. It is worth noting that there is no size check,which leads to a stack overflow vulnerability.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 2 products
| Date | Total | Labels |
|---|
| 2026-03-02 | 3 | Disclosure3 |
| 2026-03-05 | 1 | Disclosure1 |
| 2026-03-06 | 2 | Disclosure2 |
🔴 Tenda AC6, Stack Overflow, #CVE-2025-70252 (High) https://dailycve.com/tenda-ac6-stack-overflow-cve-2025-70252-high/
Post summary
This tweet announces the discovery of a high‑severity stack overflow vulnerability (CVE‑2025‑70252) in the Tenda AC6 router and links to an external article for details.
CVE-2025-70252 (CVSS:7.5, HIGH) is Undergoing Analysis. An issue was discovered in /goform/WifiWpsStart in Tenda AC6V2.0 V15.03.06.23_multi. The index and mode are controllable..https://nvd.nist.gov/vuln/detail/CVE-2025-70252 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The tweet announces CVE-2025-70252, a high‑severity vulnerability in Tenda AC6V2.0 firmware with controllable parameters, and indicates it is currently under analysis, without providing PoC or exploitation details.
CVE-2025-70252 (CVSS:7.5, HIGH) is Undergoing Analysis. An issue was discovered in /goform/WifiWpsStart in Tenda AC6V2.0 V15.03.06.23_multi. The index and mode are controllable..https://nvd.nist.gov/vuln/detail/CVE-2025-70252 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The post announces CVE‑2025‑70252 with its CVSS score and technical details, indicating analysis is underway but no evidence of exploitation or PoC is presented.
🚨*CVE* CVE-2025-70252 An issue was discovered in /goform/WifiWpsStart in Tenda AC6V2.0 V15.03.06.23_multi. The index and mode are controllable. If the conditions are met to sprintf, they w… https://www.cve.org/CVERecord?id=CVE-2025-70252 ----- Traducción: Se descubrió un pr… http://infoflow.cloud`
Post summary
CVE-2025-70252 is a vulnerability in Tenda AC6V2.0 firmware’s /goform/WifiWpsStart endpoint, where controllable index and mode parameters could lead to a buffer overflow via sprintf.
The severity is increased for this new vulnerability affecting Tenda AC6 (CVE-2025-70252) https://vuldb.com/?id.348419
Post summary
The post reports that the severity of CVE-2025-70252, a vulnerability in the Tenda AC6, has been increased, with details posted on vuldb.com.
CVE-2025-70252 An issue was discovered in /goform/WifiWpsStart in Tenda AC6V2.0 V15.03.06.23_multi. The index and mode are controllable. If the conditions are met to sprintf, they w… https://www.cve.org/CVERecord?id=CVE-2025-70252
Post summary
A vulnerability was identified in Tenda AC6V2.0’s /goform/WifiWpsStart, where controllable index and mode parameters could trigger a buffer overflow via sprintf.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | tenda | ac6 | 2.0 | - | - |
| OS | tenda | ac6_firmware | 15.03.06.23_multi | - | - |