CVE-2025-14994
High · 8.8CVSS
8.8
EPSS
0.7%
Published
Dec 21, 2025
CISA due date
—
The record
A flaw has been found in Tenda FH1201 and FH1206 1.2.0.14(408)/1.2.0.8(8155). This impacts the function strcat of the file /goform/webtypelibrary of the component HTTP Request Handler. This manipulation of the argument webSiteId causes stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been published and may be used.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|