CVE-2026-105778

Summary

The vulnerability allows for a stack-based buffer overflow through manipulation of the wifiPwd argument, leading to potential remote code execution.

Exploitability

Exploitation is relatively straightforward given the public disclosure of the exploit. The attacker must have network access to the affected device.

Blast radius

If exploited, the vulnerability could lead to complete control of the device, potentially allowing attackers to deploy malicious firmware or gain access to the network.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Tenda AC5 02.03.01.111_multi or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.