Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability was identified in Tenda A18 15.13.07.13. The affected element is the function webCgiGetUploadFile of the file /cgi-bin/UploadCfg of the component Httpd Service. Such manipulation of the argument boundary leads to stack-based buffer overflow. The attack can be executed remotely. The exploit is publicly available and might be used.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 2 products
CVE-2026-2930 Tenda A18 Remote Stack Overflow Vulnerability in Httpd Service Upload Function https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-2930
Post summary
A remote stack overflow vulnerability (CVE-2026-2930) has been identified in the Tenda A18’s Httpd service upload function.
CVE-2026-2930 A vulnerability was identified in Tenda A18 15.13.07.13. The affected element is the function webCgiGetUploadFile of the file /cgi-bin/UploadCfg of the component Httpd … https://www.cve.org/CVERecord?id=CVE-2026-2930
Post summary
A vulnerability in Tenda A18’s webCgiGetUploadFile function was disclosed, providing technical details but no PoC, exploit, or patch information.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | tenda | a18 | - | - | - |
| OS | tenda | a18_firmware | 15.13.07.13 | - | - |