VYPR
High severity8.8NVD Advisory· Published Feb 21, 2026· Updated Jun 17, 2026

CVE-2026-2886

CVE-2026-2886

Description

A weakness has been identified in Tenda A21 1.0.0.0. This affects the function set_device_name of the file /goform/SetOnlineDevName. This manipulation of the argument devName causes stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Tenda/A21llm-fuzzy2 versions
    1.0.0.0+ 1 more
    • (no CPE)range: 1.0.0.0
    • (no CPE)range: 1.0.0.0
  • cpe:2.3:o:tenda:a21_firmware:1.0.0.0:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.