CVE-2026-1420

CRÍTICO 9.8CVE-2026-1420 · Published 26/01/2026 · updated 17/06/2026

En resumen

CVE-2026-1420 es una vulnerabilidad CRÍTICO (CVSS 9.8).
Probabilidad de explotación en los próximos 30 días (EPSS): 3.8%, mayor que el 90.1% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

A flaw has been found in Tenda AC23 16.03.07.52. This impacts an unknown function of the file /goform/WifiExtraSet. This manipulation of the argument wpapsk_crypto causes buffer overflow. Remote exploitation of the attack is possible. The exploit has been published and may be used.

References

xyh4ck/iot_poc · Exploit
xyh4ck/iot_poc · Exploit
vuldb.com · Permissions Required
vuldb.com · Third Party Advisory
vuldb.com · Third Party Advisory
tenda.com.cn · Product

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free