{"id":"CVE-2026-105778","revision":"61bd1fbaf6534b8999b767952a4f36aa","records":[{"revision":"61bd1fbaf6534b8999b767952a4f36aa","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-105778","aliases":[],"title":"Tenda AC5 Wifi setWifi stack-based overflow","description":"A vulnerability has been found in Tenda AC5 02.03.01.111_multi. Affected by this issue is some unknown functionality of the file /goform/setWifi of the component Wifi Handler. Such manipulation of the argument wifiPwd leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.","state":0,"publishedAt":"2026-10-06T06:45:13.774+00:00","modifiedAt":"2026-10-06T17:40:19.337+00:00","affected":[{"ecosystem":"Vendor product","name":"AC5","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Tenda\",\n                    \"product\": \"AC5\",\n                    \"versions\": [\n                        {\n                            \"version\": \"02.03.01.111_multi\",\n                            \"status\": \"affected\"\n                        }\n                    ],\n                    \"cpes\": [\n                        \"cpe:2.3:o:tenda:ac5_firmware:*:*:*:*:*:*:*:*\"\n                    ],\n                    \"modules\": [\n                        \"Wifi Handler\"\n                    ]\n                }"}],"metrics":[{"system":"CVSS 4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P","score":9.4,"severity":"CRITICAL"},{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R","score":9.9,"severity":"CRITICAL"},{"system":"CVSS 3.0","vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R","score":9.9,"severity":"CRITICAL"},{"system":"CVSS 2.0","vector":"AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR","score":9,"severity":null}],"references":["https://vuldb.com/vuln/413811","https://vuldb.com/vuln/413811/cti","https://vuldb.com/cve/CVE-2026-105778","https://vuldb.com/submit/992587","https://github.com/raisecnull/Tenda-AC5v3-BOF/blob/main/blog.md","https://www.tenda.com.cn/"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-105778","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-105778","identifiers":["CVE-2026-105778"]},"retained":false,"historicalAffected":[]}],"coverage":[]}