CVE-2025-14993
NoneCVSS
—
EPSS
0.8%
Published
Dec 21, 2025
CISA due date
—
The record
A vulnerability was detected in Tenda AC18 15.03.05.05. This affects the function sprintf of the file /goform/SetDlnaCfg of the component HTTP Request Handler. The manipulation of the argument scanList results in stack-based buffer overflow. The attack can be executed remotely. The exploit is now public and may be used.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|