CVE-2025-15160

None

CVSS

—

EPSS

0.9%

Published

Dec 28, 2025

CISA due date

—

The record

A vulnerability has been found in Tenda WH450 1.0.0.18. This impacts an unknown function of the file /goform/PPTPServer. Such manipulation of the argument ip1 leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

Affected packages

Ecosystem	Package	Introduced	Fixed