High severity8.8NVD Advisory· Published Aug 14, 2026

CVE-2026-19789

Description

A vulnerability was determined in Tenda AC1206 15.03.06.23_multi_TD01. This vulnerability affects the function set_wl_guest_iplist of the file /goform/WifiGuestSet of the component httpd web management interface. This manipulation of the argument shareSpeed causes stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Lipenghai/IoT Bugllm-fuzzy
Range: 15.03.06.23_multi_TD01
Tenda/AC1206llm-fuzzy
Range: 15.03.06.23_multi_TD01

Patches

Vulnerability mechanics

References

github.com/lipenghai/iot_bug/blob/main/Tenda/AC12/2.mdnvd
vuldb.com/cve/CVE-2026-19789nvd
vuldb.com/submit/868921nvd
vuldb.com/vuln/389756nvd
vuldb.com/vuln/389756/ctinvd
www.tenda.com.cnnvd

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000