CVE-2026-1420CWE-119CWE-120

Tenda AC23 WifiExtraSet buffer overflow

High · published January 26, 2026

CVSS v4.0
8.7
EPSS
4%
Percentile
90.0
In the wild
Unconfirmed
What it is

⚡ A sneaky buffer overflow lurks in Tenda AC23 that could let attackers exploit its functions remotely! 🚨 Think of it like a waiter who delivers a dish-sized portion of food, but instead, the chef accidentally overfills the plate, causing everything to spill over and create a mess. In this case, the overflow can be manipulated to corrupt or expose sensitive data. If an attacker takes advantage of this vulnerability, they could potentially crash the device or even execute malicious code from afar! This means they might gain unauthorized control, leading to devastating consequences for your network security.

Put simply

Think of it like a waiter who delivers a dish-sized portion of food, but instead, the chef accidentally overfills the plate, causing everything to spill over and create a mess. In this case, the overflow can be manipulated to corrupt or expose sensitive data. This vulnerability occurs due to a flaw in the '/goform/WifiExtraSet' function, where improper handling of the 'wpapsk_crypto' argument leads to a buffer overflow, enabling remote exploitation.

What to do

If an attacker takes advantage of this vulnerability, they could potentially crash the device or even execute malicious code from afar! This means they might gain unauthorized control, leading to devastating consequences for your network security. To protect yourself, update the Tenda AC23 device to the latest firmware version immediately. Regularly check for updates and disable unnecessary remote access features to minimize exposure. 🛡️ You've got this! By staying vigilant and following these steps, you're on your way to securing your network! 💪✨

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
EPSS
0.03820 · 90.0th percentile
Weaknesses
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer; CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2026-01-26T05:02Z
EPSS history
Timeline
  • 26 JAN 05:02Z
    Tenda AC23 WifiExtraSet buffer overflow
    cvelistv5