Exploit discussion active in current signal (1 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
A vulnerability was identified in Tenda AC15 15.03.05.18. This affects the function websGetVar of the file /goform/SysToolChangePwd. Such manipulation of the argument oldPwd/newPwd/cfmPwd leads to stack-based buffer overflow. The attack can be executed remotely. The exploit is publicly available and might be used.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 2 products
| Date | Total | Labels |
|---|
| 2026-04-09 | 3 | Disclosure1General1PoC1 |
| 2026-04-10 | 1 | Disclosure1 |
CVE-2026-5830 A vulnerability was identified in Tenda AC15 15.03.05.18. This affects the function websGetVar of the file /goform/SysToolChangePwd. Such manipulation of the argument o… https://www.cve.org/CVERecord?id=CVE-2026-5830
Post summary
A vulnerability (CVE-2026-5830) was identified in Tenda AC15 firmware affecting the `websGetVar` function; no exploit details, patches, or exploitation claims are provided.
⚡ New CVE Alert: CVE-2026-5830 📊 Severity: 8.8 🚨 Risk Level: High 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-5830 #CVE-2026-5830 #CVE #High #CyberSecurity #InfoSec https://t.co/xlQZPzM6wt
Post summary
The tweet announces CVE-2026-5830 with a severity score of 8.8 and high risk level, but provides no technical details, exploit information, or mitigation steps.
🚨*CVE* CVE-2026-5830 A vulnerability was identified in Tenda AC15 15.03.05.18. This affects the function websGetVar of the file /goform/SysToolChangePwd. Such manipulation of the argument o… https://www.cve.org/CVERecord?id=CVE-2026-5830 ----- Traducción: CVE-2026-5830 Se … http://infoflow.cloud`
Post summary
CVE-2026-5830, affecting the Tenda AC15's websGetVar function in /goform/SysToolChangePwd, is reported with a link to the CVE record; no PoC, exploit, or patch is referenced.
[CVE-2026-5830: HIGH] Critical vulnerability identified in Tenda AC15 15.03.05.18 allows remote execution due to stack-based buffer overflow in /goform/SysToolChangePwd. Public exploit available.#cve,CVE-2026-5830,#cybersecurity https://cvefind.com/CVE-2026-5830
Post summary
The tweet announces a high‑severity remote‑execution flaw in Tenda AC15 caused by a stack‑based buffer overflow, notes that a public exploit exists, but provides no patch or detailed exploit code.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | tenda | ac15 | - | - | - |
| OS | tenda | ac15_firmware | 15.03.05.18 | - | - |