CVE-2026-6016
High · 8.8CVSS
8.8
EPSS
0.8%
Published
Apr 10, 2026
CISA due date
—
The record
A vulnerability was found in Tenda AC9 15.03.02.13. The affected element is the function decodePwd of the file /goform/WizardHandle of the component POST Request Handler. Performing a manipulation of the argument WANS results in stack-based buffer overflow. The attack can be initiated remotely. The exploit has been made public and could be used.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-76030 Memory corruption in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote… CWE-119
- CVE-2026-76026 Memory corruption in Autofill in Google Chrome prior to 156.0.8078.79 allowed a remote… CWE-119
- CVE-2026-76027 Memory corruption in CacheStorage in Google Chrome prior to 156.0.8078.79 allowed a… CWE-119
- CVE-2026-76029 Memory corruption in Network in Google Chrome prior to 156.0.8078.79 allowed a remote… CWE-119
- CVE-2026-76024 Memory corruption in MediaStream in Google Chrome prior to 156.0.8078.79 allowed a remote… CWE-119
- CVE-2026-119264 Memory corruption in Dawn in Google Chrome prior to 156.0.8078.79 allowed a remote… CWE-119
- CVE-2026-119265 Memory corruption in Quota in Google Chrome prior to 156.0.8078.79 allowed a remote… CWE-119
- CVE-2026-119263 Memory corruption in GarbageCollection in Google Chrome prior to 156.0.8078.79 allowed a… CWE-119