Exploit discussion active in current signal (1 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
A weakness has been identified in Tenda AC9 15.03.06.42_multi. Affected is the function formGetDdosDefenceList. This manipulation of the argument security.ddos.map causes stack-based buffer overflow. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 2 products
| Date | Total | Labels |
|---|
| 2026-02-08 | 1 | General1 |
| 2026-02-09 | 1 | Exploit1 |
CVE-2026-2191 A weakness has been identified in Tenda AC9 15.03.06.42_multi. Affected is the function formGetDdosDefenceList. This manipulation of the argument http://security.ddos.map caus… https://www.cve.org/CVERecord?id=CVE-2026-2191
Post summary
A weakness in Tenda AC9 firmware affecting the formGetDdosDefenceList function is reported, but no PoC, exploit details, mitigation steps, or evidence of active exploitation are provided.
🚨 HIGH-severity alert: Tenda AC9 routers (v15.03.06.42_multi) have a stack overflow flaw allowing remote code execution. Public exploit is out — limit exposure, segment networks, and disable remote admin! 🔒 https://radar.offseq.com/threat/cve-2026-2191-stack-based-buffer-overf... https://t.co/ZR9S3fMgoh
Post summary
High‑severity stack‑overflow vulnerability in Tenda AC9 routers permits remote code execution; a public exploit is available, prompting network segmentation and disabling remote admin as mitigations.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | tenda | ac9 | - | - | - |
| OS | tenda | ac9_firmware | 15.03.06.42_multi | - | - |