CVE-2026-1420
Critical · 9.8CVSS
9.8
EPSS
3.8%
Published
Jan 26, 2026
CISA due date
—
The record
A flaw has been found in Tenda AC23 16.03.07.52. This impacts an unknown function of the file /goform/WifiExtraSet. This manipulation of the argument wpapsk_crypto causes buffer overflow. Remote exploitation of the attack is possible. The exploit has been published and may be used.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|