Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability was detected in Tenda AC5 15.03.06.47. This affects the function fromAddressNat of the file /goform/addressNat of the component POST Request Handler. The manipulation of the argument page results in stack-based buffer overflow. The attack can be launched remotely. The exploit is now public and may be used.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 2 products
CVE-2026-4902 A vulnerability was detected in Tenda AC5 15.03.06.47. This affects the function fromAddressNat of the file /goform/addressNat of the component POST Request Handler. Th… https://www.cve.org/CVERecord?id=CVE-2026-4902
Post summary
The article announces the detection of CVE-2026-4902 in Tenda AC5 firmware, detailing the affected function and file but offering no evidence of exploitation, mitigation, or false-positive status.
[CVE-2026-4902: HIGH] Vulnerability detected in Tenda AC5 15.03.06.47 allows remote attackers to exploit a stack-based buffer overflow via manipulation of the argument page in the component POST Request Handler.#cve,CVE-2026-4902,#cybersecurity https://cvefind.com/CVE-2026-4902
Post summary
This short note announces a stack-based buffer overflow in Tenda AC5 firmware 15.03.06.47, providing technical details but no evidence of exploitation, fixes, or false positives.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | tenda | ac5 | 1.0 | - | - |
| OS | tenda | ac5_firmware | 15.03.06.47 | - | - |