Recommended action window: Monitor and triage in normal cycle
NVD description
A security vulnerability has been detected in Tenda AC19 16.03.10.07. The impacted element is the function formSetFirewallCfg of the file /goform/SetFirewallCfg of the component httpd Web Management Service. Such manipulation of the argument firewallEn leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed publicly and may be used.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
🔓 Tenda AC19 routers: CVSS 10 stack overflow in formSetFirewallCfg via the httpd web mgmt service. No auth, network-accessible, full compromise possible. CVE-2026-113744 — patch or isolate now. #cybersecurity #ciso #vulnerabilities #mssp https://secalerts.co/vulnerability/CVE-2026-113744?utm_campaign=x https://t.co/6Z8Gz3F9Vy