Medium severity6.5NVD Advisory· Published Sep 14, 2026

CVE-2026-90688

Description

A vulnerability was identified in Tenda W20E 15.11.0.61068_1546_841_CN_TDC. This issue affects the function formIPMacBindAdd of the component HTTP Handler. Such manipulation of the argument IPMacBindRule leads to stack-based buffer overflow. It is possible to launch the attack remotely.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Amalll Sec/Router Vulnerability Researchreferences
Tenda/W20Ellm-fuzzy
Range: 15.11.0.61068_1546_841_CN_TDC

Patches

Vulnerability mechanics

References

github.com/Amalll-Sec/router-vulnerability-research/blob/main/advisories/Tenda/W20E/formIPMacBindAdd/README.mdnvd
vuldb.com/cve/CVE-2026-90688nvd
vuldb.com/submit/914958nvd
vuldb.com/vuln/403221nvd
vuldb.com/vuln/403221/ctinvd
www.tenda.com.cnnvd

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000