CVE-2026-113744

Summary

A stack-based buffer overflow in the formSetFirewallCfg function of Tenda AC19 firmware v16.03.10.07 allows remote attackers to overwrite memory via the firewallEn parameter, potentially leading to arbitrary code execution.

Exploitability

Exploitation is trivial for remote attackers as no authentication or user interaction is required and a public exploit exists.

Blast radius

Successful exploitation could allow full system compromise including remote code execution, data theft, and service disruption across the vulnerable device.

Detection

Look for HTTP POST requests to /goform/SetFirewallCfg with abnormally large firewallEn parameter values (>256 bytes) in web server access logs; also monitor for unexpected restarts or crashes of the httpd process.

Prioritized remediation

Upgrade to firmware version 16.03.10.08 or later, if available; otherwise, disable the web management interface or restrict access to the /goform/SetFirewallCfg endpoint via firewall rules.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.