EUVD-2026-58585
GHSA-w66q-5x8w-9jjm
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Management interface is network-reachable (AV:N), low credentials sufficient (PR:L), no scope change, full C/I/A impact on device consistent with RCE or crash.
Primary rating from Vendor (VulDB).
CVSS VectorVendor: VulDB
Lifecycle Timeline
5DescriptionCVE.org
A security flaw has been discovered in Tenda G0 up to 20260625. Impacted is the function setPortMapping of the file /goform/module of the component httpd web management interface. Performing a manipulation of the argument portMappingServer/porMappingtInternal/portMappingExternal results in buffer overflow. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks.
AnalysisAI
Buffer overflow in the Tenda G0 router's httpd web management interface allows authenticated remote attackers to corrupt memory and potentially execute arbitrary code by submitting oversized input to the setPortMapping function via the /goform/module endpoint. All firmware builds up to version 20260625 are confirmed affected per ENISA EUVD-2026-58585. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires network-level access to the Tenda G0 httpd web management interface and possession of at least low-privilege management credentials (CVSS PR:L) - unauthenticated exploitation is not supported by the provided vector. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 4.0 base score of 7.4 is driven by AV:N (network-reachable management interface), AC:L (no race condition or special timing required), PR:L (low-privilege credentials sufficient), and high VC/VI/VA impact, reflecting full compromise potential of the device. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | No vendor-released patch with a confirmed fixed firmware version has been identified in the available references at time of analysis; administrators should monitor https://www.tenda.com.cn/ and the VulDB advisory at https://vuldb.com/vuln/389758 for firmware updates addressing CVE-2026-19792. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, conduct a complete inventory of Tenda G0 routers with firmware versions through 20260625 and immediately restrict administrative access to these devices to trusted internal networks only, disabling remote management capability if operationally feasible; enable comprehensive audit logging on the /goform/module endpoint and all authentication attempts. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Stack-based buffer overflow in the Tenda G0 router's httpd web management interface allows low-privileged remote attacke
Stack-based buffer overflow in the Tenda G0 router's httpd web management interface allows network-adjacent or remote au
Same weakness CWE-120 – Classic Buffer Overflow
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today