Cpe:2.3:a:tenda:ac19:*:*:*:*:*:*:*:* - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/cpes/cpe2.3atendaac19/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioSun, 08 Nov 2026 00:44:48 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgTenda AC19: Heap-based buffer overflow in saveParentControlInfo (CVE-2026-123966)https://feed.craftedsignal.io/briefs/2026-11-tenda-ac19-buffer-overflow/Sun, 08 Nov 2026 00:44:48 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-tenda-ac19-buffer-overflow/A heap-based buffer overflow vulnerability exists in Tenda AC19 firmware version 16.03.10.07, located in the saveParentControlInfo function within the /goform/saveParentControlInfo file.<p>A vulnerability has been identified in Tenda AC19 (firmware 16.03.10.07). The function saveParentControlInfo in /goform/saveParentControlInfo is susceptible to a heap-based buffer overflow when the deviceId argument is manipulated. This attack can be performed remotely, and the exploit has been publicly disclosed.</p> criticaladvisory