Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
8.6
CVE-2026-105778: Tenda AC5 router can be remotely compromised via Wi‑Fi password
CVE-2026-105778 · published 13 days ago
Summary
The Tenda AC5 router allows a specially crafted Wi‑Fi password to be sent to its configuration page, which can cause the device to crash or be taken over. This can be done from anywhere on the network without physical access. Apply the latest firmware update from Tenda or disable remote Wi‑Fi configuration to protect the router.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| tenda | ac5 | 02.03.01.111_multi |
Original advisory text
Tenda AC5 Wifi setWifi stack-based overflow
A vulnerability has been found in Tenda AC5 02.03.01.111_multi. Affected by this issue is some unknown functionality of the file /goform/setWifi of the component Wifi Handler. Such manipulation of the argument wifiPwd leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker full control (estimated)
Type
CWE-119Buffer Overflow
CWE-121Stack-based Buffer Overflow
Timeline
Published6 Oct 2026
Updated15 Oct 2026
First seen6 Oct 2026
Track software like this
Free during beta