CVE-2025-15180
NoneCVSS
—
EPSS
1.1%
Published
Dec 29, 2025
CISA due date
—
The record
A vulnerability was identified in Tenda WH450 1.0.0.18. The affected element is an unknown function of the file /goform/webExcptypemanFilte of the component HTTP Request Handler. Such manipulation of the argument page leads to stack-based buffer overflow. The attack may be launched remotely. The exploit is publicly available and might be used.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|