Signal is active with 4 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability was determined in Tenda AC5 15.03.06.47. The affected element is the function decodePwd of the file /goform/WizardHandle of the component POST Request Handler. Executing a manipulation of the argument WANT/WANS can lead to stack-based buffer overflow. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 2 products
| Date | Total | Labels |
|---|
| 2026-03-26 | 1 | Disclosure1 |
| 2026-03-27 | 4 | Disclosure3General1 |
A new vulnerability with increased severity was disclosed for Tenda AC5 (CVE-2026-4906) https://vuldb.com/?id.353657
Post summary
The post announces the disclosure of a new vulnerability, CVE‑2026‑4906, affecting the Tenda AC5 with higher severity, but provides no further technical details, PoC, or exploitation information.
[CVE-2026-4906: HIGH] Critical remote stack-based buffer overflow vulnerability found in Tenda AC5 15.03.06.47. Exploit publicly disclosed, execute caution. #cybersecurity#cve,CVE-2026-4906,#cybersecurity https://cvefind.com/CVE-2026-4906
Post summary
A high‑severity stack‑based buffer overflow (CVE‑2026‑4906) was disclosed for Tenda AC5 firmware 15.03.06.47; no exploit details or patch information were provided.
CVE-2026-4906 A vulnerability was determined in Tenda AC5 15.03.06.47. The affected element is the function decodePwd of the file /goform/WizardHandle of the component POST Request H… https://www.cve.org/CVERecord?id=CVE-2026-4906
Post summary
The information announces CVE-2026-4906 discovered in the Tenda AC5 firmware, detailing the affected file and function but does not discuss exploitation, patches, or a PoC.
⚡ New CVE Alert: CVE-2026-4906 📊 Severity: 8.8 🚨 Risk Level: High 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-4906 #CVE-2026-4906 #CVE #High #CyberSecurity #InfoSec https://t.co/VN92f9sOGT
Post summary
The tweet announces CVE-2026-4906, highlighting its high severity (8.8) and risk level, but offers no deeper technical insight, exploitation notes, or mitigation guidance.
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-4906 - Tenda AC5 POST Request WizardHandle decodePwd stack-based overflow Intel Report: https://ift.tt/RgqBYOZ
Post summary
The post announces a stack‑based overflow vulnerability (CVE‑2026‑4906) in Tenda AC5 with a reference to an intel report, but it provides no PoC, exploit code, patch information, or evidence of active exploitation.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | tenda | ac5 | 1.0 | - | - |
| OS | tenda | ac5_firmware | 15.03.06.47 | - | - |