Back cve.threatint.com

Tenda G0 httpd Web Management module formSetPortMirror stack-based overflowA ... CVE: New / 7h A vulnerability was identified in Tenda G0 up to 20260625. This issue affects the function formSetPortMirror of the file /goform/module of the component httpd Web Management Interface. Such manipul...

cve.threatint.com • August 14, 2026

A vulnerability was identified in Tenda G0 up to 20260625. This issue affects the function formSetPortMirror of the file /goform/module of the component httpd Web Management Interface. Such manipulation of the argument portMirrorMirroredPorts leads to stack-based buffer overflow. The attack can be executed remotely. The exploit is publicly available and might be used.

PUBLISHED Reserved 2026-08-13 | Published 2026-08-14 | Updated 2026-08-14 | Assigner VulDB

HIGH: 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P HIGH: 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R HIGH: 8.8 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R 9.0 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR Problem types Stack-based Buffer Overflow Memory Corruption Product status 20260625 affected Timeline 2026-08-13: Advisory disclosed 2026-08-13: VulDB entry created 2026-08-13: VulDB entry last update Credits stksgg (VulDB User) reporter References vuldb.com/vuln/389757 (VDB-389757 | Tenda G0 httpd Web Management module formSetPortMirror stack-based overflow) vdb-entry technical-description vuldb.com/vuln/389757/cti (VDB-389757 | CTI Indicators (IOB, IOC, IOA)) signature permissions-required vuldb.com/cve/CVE-2026-19790 (CVE-2026-19790 | CVE Analysis and Report) third-party-advisory vuldb.com/submit/868924 (Submit #868924 | Tenda G0 Tenda G0 Buffer Overflow) third-party-advisory github.com/lipenghai/iot_bug/blob/main/Tenda/G0/1.md exploit product cve.org (CVE-2026-19790) nvd.nist.gov (CVE-2026-19790) Download JSON

Stack-based Buffer Overflow

stksgg (VulDB User) reporter

vuldb.com/vuln/389757 (VDB-389757 | Tenda G0 httpd Web Management module formSetPortMirror stack-based overflow) vdb-entry technical-description

vuldb.com/vuln/389757/cti (VDB-389757 | CTI Indicators (IOB, IOC, IOA)) signature permissions-required

vuldb.com/cve/CVE-2026-19790 (CVE-2026-19790 | CVE Analysis and Report) third-party-advisory

vuldb.com/submit/868924 (Submit #868924 | Tenda G0 Tenda G0 Buffer Overflow) third-party-advisory

github.com/lipenghai/iot_bug/blob/main/Tenda/G0/1.md exploit

product

cve.org (CVE-2026-19790)

nvd.nist.gov (CVE-2026-19790)

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Stack-based Buffer Overflow Vulnerability in Tenda G0 Devices A high-severity stack-based buffer overflow vulnerability, CVE-2026-19790, has been identified in Tenda G0 devices up to version 20260625. The flaw exists in the formSetPortMirror function of the httpd Web Management Interface, allowing remote attackers to exploit the vulnerability by manipulating the portMirrorMirroredPorts argument. This can lead to arbitrary code execution, system data modification, or service crashes. Public exploit code is available, and an authenticated user with low privileges can trigger the attack remotely. A patch is available, and users are advised to update their devices and restrict network access to the management interface. Cybersecurity professionals consider this an immediate threat requiring urgent mitigation. The CVSS score assigned is 8.8, indicating a high severity level. 1 sources 74

Extracted Entities

Tenda G0 httpd Web Management module formSetPortMirror stack-based overflowA ... CVE: New / 7h A vulnerability was identified in Tenda G0 up to 20260625. This issue affects the function formSetPortMirror of the file /goform/module of the component httpd Web Management Interface. Such manipul...

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

CWE Weaknesses (1)

Domains (3)

Platforms (1)