CVE-2026-2140CWE-119CWE-120

Tenda TX9 setMacFilterCfg sub_4223E0 buffer overflow

High · published February 8, 2026

CVSS v4.0
8.7
EPSS
1%
Percentile
57.2
In the wild
Unconfirmed
What it is

⚡ A remote attacker can trigger a buffer overflow in Tenda TX9 routers, all the way up to version 22.03.02.10_multi! 🔥 Think of it as a delivery truck that can only hold a certain number of packages. If someone manages to stuff in too many boxes without checking, it spills over and disrupts everything — that's what this vulnerability does to your router's memory! An attacker exploiting this vulnerability could potentially gain control over the router, allowing them to intercept traffic, change settings, or even launch further attacks on your network. Imagine someone barging in and taking over your whole delivery system — absolutely devastating!

Put simply

Think of it as a delivery truck that can only hold a certain number of packages. If someone manages to stuff in too many boxes without checking, it spills over and disrupts everything — that's what this vulnerability does to your router's memory! This buffer overflow occurs in the `setMacFilterCfg` function, where improper handling of the `deviceList` argument allows an attacker to overwrite adjacent memory, leading to arbitrary code execution.

What to do

An attacker exploiting this vulnerability could potentially gain control over the router, allowing them to intercept traffic, change settings, or even launch further attacks on your network. Imagine someone barging in and taking over your whole delivery system — absolutely devastating! To protect your network, immediately update your Tenda TX9 router to the latest firmware version. Additionally, review your network configurations and enable robust security measures like firewall settings to mitigate potential risks. You've got this! With these steps, you'll keep your router safe and sound. 🛡️

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
EPSS
0.00833 · 57.2th percentile
Weaknesses
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer; CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2026-02-08T07:02Z
EPSS history
Timeline
  • 08 FEB 07:02Z
    Tenda TX9 setMacFilterCfg sub_4223E0 buffer overflow
    cvelistv5