Details of VAR-202603-5024

ID

VAR-202603-5024

CVE

CVE-2026-4961

TITLE

Shenzhen Tenda Technology Co.,Ltd. of AC6 Multiple vulnerabilities in firmware

Trust: 0.8

sources: JVNDB: JVNDB-2026-009568

DESCRIPTION

A vulnerability was identified in Tenda AC6 15.03.05.16. Affected by this vulnerability is the function formQuickIndex of the file /goform/QuickIndex of the component POST Request Handler. The manipulation of the argument PPPOEPassword leads to stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. This attack can be performed remotely, and since the exploit is publicly available, it is susceptible to being exploited.All information handled by the software may be leaked to the outside. All information handled by the software may be rewritten. Furthermore, the software may stop working completely. Furthermore, attacks that exploit this vulnerability will not affect other software

Trust: 1.62

sources: NVD: CVE-2026-4961 // JVNDB: JVNDB-2026-009568

AFFECTED PRODUCTS

vendor:	tenda	model:	ac6	scope:	eq	version:	15.03.05.16	Trust: 1.0
vendor:	tenda	model:	ac6	scope:	eq	version:	ac6 firmware 15.03.05.16	Trust: 0.8
vendor:	tenda	model:	ac6	scope:	eq	version:	-	Trust: 0.8
vendor:	tenda	model:	ac6	scope:	-	version:	-	Trust: 0.8

sources: JVNDB: JVNDB-2026-009568 // NVD: CVE-2026-4961

CVSS

SEVERITY

CVSSV2

CVSSV3

cna@vuldb.com:	CVE-2026-4961
value:	HIGH
Trust: 1.0
OTHER:	JVNDB-2026-009568
value:	HIGH
Trust: 0.8

cna@vuldb.com:	CVE-2026-4961
severity:	HIGH
baseScore:	9.0
vectorString:	AV:N/AC:L/AU:S/C:C/I:C/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	SINGLE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	8.0
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.0
OTHER:	JVNDB-2026-009568
severity:	HIGH
baseScore:	9.0
vectorString:	AV:N/AC:L/AU:S/C:C/I:C/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	SINGLE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	NONE
impactScore:	NONE
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.8

cna@vuldb.com:	CVE-2026-4961
baseSeverity:	HIGH
baseScore:	8.8
vectorString:	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	LOW
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	2.8
impactScore:	5.9
version:	3.1
Trust: 1.0
OTHER:	JVNDB-2026-009568
baseSeverity:	HIGH
baseScore:	8.8
vectorString:	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	LOW
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8

sources: JVNDB: JVNDB-2026-009568 // NVD: CVE-2026-4961

PROBLEMTYPE DATA

problemtype:	CWE-121	Trust: 1.0
problemtype:	CWE-119	Trust: 1.0
problemtype:	CWE-787	Trust: 1.0
problemtype:	Buffer error (CWE-119) [ others ]	Trust: 0.8
problemtype:	Stack-based buffer overflow (CWE-121) [ others ]	Trust: 0.8
problemtype:	Out-of-bounds writing (CWE-787) [NVD evaluation ]	Trust: 0.8

sources: JVNDB: JVNDB-2026-009568 // NVD: CVE-2026-4961

PATCH

title:

//vuldb.com/?submit.777617

url:

https://lavender-bicycle-a5a.notion.site/Tenda-AC6-QuickIndex-32053a41781f80758e27fa4259ec80cf?source=copy_link

Trust: 0.8

sources: JVNDB: JVNDB-2026-009568

EXTERNAL IDS

db:	NVD	id:	CVE-2026-4961	Trust: 2.6
db:	VULDB	id:	353838	Trust: 1.0
db:	JVNDB	id:	JVNDB-2026-009568	Trust: 0.8

sources: JVNDB: JVNDB-2026-009568 // NVD: CVE-2026-4961

REFERENCES

url:	https://www.tenda.com.cn/	Trust: 1.8
url:	https://vuldb.com/?ctiid.353838	Trust: 1.0
url:	https://vuldb.com/?id.353838	Trust: 1.0
url:	https://vuldb.com/?submit.777617	Trust: 1.0
url:	https://lavender-bicycle-a5a.notion.site/tenda-ac6-quickindex-32053a41781f80758e27fa4259ec80cf?source=copy_link	Trust: 1.0
url:	https://nvd.nist.gov/vuln/detail/cve-2026-4961	Trust: 0.8

sources: JVNDB: JVNDB-2026-009568 // NVD: CVE-2026-4961

SOURCES

db:	JVNDB	id:	JVNDB-2026-009568
db:	NVD	id:	CVE-2026-4961

LAST UPDATE DATE

2026-04-03T23:35:27.132000+00:00

SOURCES UPDATE DATE

db:	JVNDB	id:	JVNDB-2026-009568	date:	2026-04-02T01:37:00
db:	NVD	id:	CVE-2026-4961	date:	2026-03-31T16:26:10.427

SOURCES RELEASE DATE

db:	JVNDB	id:	JVNDB-2026-009568	date:	2026-04-02T00:00:00
db:	NVD	id:	CVE-2026-4961	date:	2026-03-27T17:16:31.090