CVE-2026-2139CWE-119CWE-120

Tenda TX9 fast_setting_wifi_set sub_432580 buffer overflow

High · published February 8, 2026

CVSS v4.0
8.7
EPSS
1%
Percentile
53.2
In the wild
Unconfirmed
What it is

⚡ A remote attacker can exploit this buffer overflow vulnerability in Tenda TX9 routers, affecting versions up to 22.03.02.10_multi! This is a real call to action! 🔥 Think of it like a hotel reservation system that allows overbooking. If someone sneaks in an extra guest in the system without checks, it could lead to chaos—rooms overflowed, guests furious, and security compromised! An attacker could remotely manipulate the SSID parameter, leading to a buffer overflow. This may grant them unauthorized access to the router, potentially allowing them to execute malicious code and take control of the device. Imagine the impact: compromised networks, stolen data, and a total loss of privacy!

Put simply

Think of it like a hotel reservation system that allows overbooking. If someone sneaks in an extra guest in the system without checks, it could lead to chaos—rooms overflowed, guests furious, and security compromised! This vulnerability resides in the function sub_432580 in the /goform/fast_setting_wifi_set file. By manipulating the SSID argument, an attacker can cause a buffer overflow, leading to severe consequences for the affected device.

What to do

An attacker could remotely manipulate the SSID parameter, leading to a buffer overflow. This may grant them unauthorized access to the router, potentially allowing them to execute malicious code and take control of the device. Imagine the impact: compromised networks, stolen data, and a total loss of privacy! To protect your network, update your Tenda TX9 to the latest version immediately, ensuring you are beyond 22.03.02.10_multi. Additionally, review your security settings and monitor for any unusual activity. Don’t let them in! You've got this! With these steps, you’ll be on your way to reinforcing your network security in no time! 🛡️

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
EPSS
0.00722 · 53.2th percentile
Weaknesses
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer; CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2026-02-08T06:32Z
EPSS history
Timeline
  • 08 FEB 06:32Z
    Tenda TX9 fast_setting_wifi_set sub_432580 buffer overflow
    cvelistv5