CVE-2026-1420Disclosure(tenda / ac23)

LOWCVSS 9.8 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A flaw has been found in Tenda AC23 16.03.07.52. This impacts an unknown function of the file /goform/WifiExtraSet. This manipulation of the argument wpapsk_crypto causes buffer overflow. Remote exploitation of the attack is possible. The exploit has been published and may be used.

tenda CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Exploit / PoC references

Vendor / third-party advisories

Other references

Weakness type (CWE)

CWE-119CWE-120

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

ac23
ac23_firmware

Threat summary

2 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 2 signals
Disclosure: 2 classified signals
Peaked 1d ago at 1 mentions (2026-01-30); latest day: 1
2 total mentions across 2 days

Affected systems

Vendors

tenda

Products

ac23ac23_firmware

2 versions affected across 2 products

Deep dive

Activity timeline2 mentions / 2d

Signal classification1 categories

Disclosure

2100.0%

Referenced assets1 URL

By indicator

https://nvd.nist.gov/vuln/detail/CVE-2026-1420

Full discourse2 posts

CRAC Learning - Tech@cracbot252d
Disclosure
CVE-2026-1420 (CVSS:7.4, HIGH) is Analyzed. A flaw has been found in Tenda AC23 16.03.07.52. This impacts an unknown function of the file /goform/WifiExtraSet. This..https://nvd.nist.gov/vuln/detail/CVE-2026-1420 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The post announces CVE-2026-1420, a high‑severity flaw in Tenda AC23 routers affecting an unknown function in /goform/WifiExtraSet, with no PoC, exploit, or patch details provided.
0000034
171 followersView on X
CRAC Learning - Tech@cracbot253d
Disclosure
CVE-2026-1420 (CVSS:7.4, HIGH) is Analyzed. A flaw has been found in Tenda AC23 16.03.07.52. This impacts an unknown function of the file /goform/WifiExtraSet. This..https://nvd.nist.gov/vuln/detail/CVE-2026-1420 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The post discloses a high‑severity vulnerability (CVE‑2026‑1420) affecting Tenda AC23, noting the impacted file but providing no exploit or mitigation details.
0000039
171 followersView on X

CPE platform detail2 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

2 of 2 entries

Part	Vendor	Product	Version	Target SW	Target HW
HW	tenda	ac23	-	-	-
OS	tenda	ac23_firmware	16.03.07.52	-	-

Explore more

Back to dashboard tenda CVEs ac23 vulnerabilities