CVE-2026-123966
CRITICAL
NVD
CVSS Score
10
Severity
CRITICAL
Published
Nov 07, 2026
Vendor
unknown
Description
A vulnerability was determined in Tenda AC19 16.03.10.07. Affected by this issue is the function saveParentControlInfo of the file /goform/saveParentControlInfo. This manipulation of the argument deviceId causes heap-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.