CVE-2026-1637CWE-119CWE-121

Tenda AC21 AdvSetMacMtuWan fromAdvSetMacMtuWan stack-based overflow

High · published January 29, 2026

CVSS v4.0
8.7
EPSS
1%
Percentile
53.1
In the wild
Unconfirmed
What it is

🚨 A stack-based buffer overflow vulnerability in the Tenda AC21 could let attackers remotely run wild! 🔥 Think of it as a restaurant kitchen where the chef accidentally leaves the oven door open. An intruder could sneak in and wreak havoc before anyone even notices something’s wrong! An attacker could exploit this vulnerability to execute arbitrary code, potentially allowing them to take control of your device. This could lead to unauthorized access to your network and sensitive data, creating a nightmare scenario for any unsuspecting user.

Put simply

Think of it as a restaurant kitchen where the chef accidentally leaves the oven door open. An intruder could sneak in and wreak havoc before anyone even notices something’s wrong! The vulnerability exists in the function fromAdvSetMacMtuWan found in /goform/AdvSetMacMtuWan. A malicious actor could trigger a stack-based buffer overflow through crafted inputs, leading to potential remote code execution.

What to do

An attacker could exploit this vulnerability to execute arbitrary code, potentially allowing them to take control of your device. This could lead to unauthorized access to your network and sensitive data, creating a nightmare scenario for any unsuspecting user. To secure your Tenda AC21, patch it immediately to the latest version if available. If patches are not provided, consider changing firewall settings or disabling remote management to mitigate risks. Regularly monitoring your network for unusual activity is also essential. You've got this! Stay vigilant and take these steps to secure your device! 🛡️

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
EPSS
0.00712 · 53.1th percentile
Weaknesses
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer; CWE-121 · Stack-based Buffer Overflow
Published
2026-01-29T22:32Z
EPSS history
Timeline
  • 29 JAN 22:32Z
    Tenda AC21 AdvSetMacMtuWan fromAdvSetMacMtuWan stack-based overflow
    cvelistv5