Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability was found in Tenda AC1206 15.03.06.23_multi_TD01. This affects the function set_device_name of the file /goform/SetOnlineDevName of the component httpd web management interface. The manipulation of the argument devName results in stack-based buffer overflow. The attack may be launched remotely. The exploit has been made public and could be used.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-08-14 | 2 | Disclosure2 |
| 2026-08-15 | 1 | Patch1 |
CVE-2026-19788: stack buffer overflow in Tenda AC1206 httpd (fw 15.03.06.23). Oversized devName parameter, remote code execution. The form's maxlength is not a bound. Write-up: https://offensive360.com/zerodays/cve-2026-19788-tenda-ac1206-router-firmware/?utm_medium=social&utm_campaign=vuln_research&utm_source=x&utm_content=20260928 #CVE #IoTSecurity https://t.co/Egl41tigST
CVE-2026-19788 – Critical stack buffer overflow in Tenda AC1206 router via /goform/SetOnlineDevName. Remote RCE possible. CVSS 8.8. Unpatched – update firmware or restrict access now. #CVE #Tenda #infosec https://www.valtersit.com/cve/CVE-2026-19788/ #CVE #infosec #SysAdmin #cybersecurity #Linux #infosec #devsecops #devops #developer #sysadmin #100daysofcode #git #github #gitlab #redteam #blueteam #ethicalhacker #ethicalhacking #cybersecurityawareness #cybersecurity #cybersecuritynews #cybersecuritytips #python #hacker #linux #kali #ubuntu #debian #ukraine #spain #ireland #unitedkingdom #canada #finland #estonia #lithuania #ireland #hungary #denmark #norway #malta
Post summary
The tweet highlights a critical stack buffer overflow in a Tenda router, stresses the absence of a patch, and urges firms to update firmware or restrict access.
🚨*CVE* CVE-2026-19788 A vulnerability was found in Tenda AC1206 15.03.06.23_multi_TD01. This affects the function set_device_name of the file /goform/SetOnlineDevName of the component http… https://www.cve.org/CVERecord?id=CVE-2026-19788 ----- Traducción: CVE-2026-19788 Se … https://infoflow.cloud`
Post summary
The post announces the discovery of CVE-2026-19788 in a Tenda AC1206 device, specifying the affected function and file, but offers no PoC, exploit, active‑exploitation evidence, or patch information.
CVE-2026-19788 A vulnerability was found in Tenda AC1206 15.03.06.23_multi_TD01. This affects the function set_device_name of the file /goform/SetOnlineDevName of the component http… https://www.cve.org/CVERecord?id=CVE-2026-19788
Post summary
The post announces CVE-2026-19788 as a new vulnerability in Tenda AC1206, specifying the affected function and file, but it does not provide a PoC, exploit code, patch, or evidence of active exploitation.