CVE-2026-19790 AKAOMA CVE VULNERABILITIES / 8h A vulnerability was identified in Tenda G0 up to 20260625. This issue affects the function formSetPortMirror of the file /goform/module of the component httpd Web Management Interface. Such manipulation of the argument portMirrorMirroredPorts leads to stack-based buffer overflow. The attack can be executed remotely. The exploit is publicly available and might be used.

Back cve.akaoma.com

CVE-2026-19790 AKAOMA CVE VULNERABILITIES / 8h A vulnerability was identified in Tenda G0 up to 20260625. This issue affects the function formSetPortMirror of the file /goform/module of the component httpd Web Management Interface. Such manipulation of the argument portMirrorMirroredPorts leads to stack-based buffer overflow. The attack can be executed remotely. The exploit is publicly available and might be used.

cve.akaoma.com • August 14, 2026

Share: View original

8.8 /10 Severe Risk Cybersecurity professionals consider CVE-2026-19790 an immediate threat requiring urgent mitigation.

Cybersecurity professionals consider CVE-2026-19790 an immediate threat requiring urgent mitigation.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Stack-based Buffer Overflow Vulnerability in Tenda G0 Devices A high-severity stack-based buffer overflow vulnerability, CVE-2026-19790, has been identified in Tenda G0 devices up to version 20260625. The flaw exists in the formSetPortMirror function of the httpd Web Management Interface, allowing remote attackers to exploit the vulnerability by manipulating the portMirrorMirroredPorts argument. This can lead to arbitrary code execution, system data modification, or service crashes. Public exploit code is available, and an authenticated user with low privileges can trigger the attack remotely. A patch is available, and users are advised to update their devices and restrict network access to the management interface. Cybersecurity professionals consider this an immediate threat requiring urgent mitigation. The CVSS score assigned is 8.8, indicating a high severity level. 1 sources 74

Extracted Entities

CVEs (1)

CWE Weaknesses (1)

CWE-120 - Classic Buffer Overflow