Which versions of Tenda are affected by CVE-2026-4974?

Tenda AC7 router firmware version 15.03.06.44 contains a stack-based buffer overflow vulnerability that allows authenticated attackers to execute arbitrary code on affected devices.

How to fix or mitigate CVE-2026-4974?

24 hours: Inventory all Tenda AC7 routers in production, identify firmware version 15.03.06.44, and isolate affected devices from critical network segments. 7 days: Check Tenda's advisory portal for patched firmware versions beyond 15.03.06.44; if no patch is available, develop device replacement or decommissioning plan. 30 days: Complete replacement or decommissioning of vulnerable Tenda AC7 devices; migrate network functions to verified alternative router models with current security support.

Tenda CVE-2026-4974

Q: What is the CVSS score of CVE-2026-4974?

CVE-2026-4974 has a CVSS 4.0 base score of 7.4 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-16809 HIGH

Buffer Overflow (CWE-119)

2026-03-27 cna@vuldb.com

Tenda Buffer Overflow

7.4

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

7.4 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

EUVD ID Assigned

Mar 27, 2026 - 20:22 euvd

EUVD-2026-16809

Analysis Generated

Mar 27, 2026 - 20:22 vuln.today

CVE Published

Mar 27, 2026 - 20:16 nvd

HIGH 7.4

DescriptionCVE.org

A flaw has been found in Tenda AC7 15.03.06.44. Affected by this issue is the function fromSetSysTime of the file /goform/SetSysTimeCfg of the component POST Request Handler. Executing a manipulation of the argument Time can lead to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been published and may be used.

AnalysisAI

Stack-based buffer overflow in Tenda AC7 router firmware 15.03.06.44 allows authenticated remote attackers to execute arbitrary code via crafted Time parameter to /goform/SetSysTimeCfg endpoint. Publicly available exploit code exists. EPSS data not available, but exploitation requires low attack complexity with network access and low privileges (CVSS:4.0 AV:N/AC:L/PR:L). This is a critical pre-authentication boundary issue in consumer router infrastructure with confirmed POC, warranting immediate patching for affected deployments.

Technical ContextAI

This vulnerability affects the fromSetSysTime function within the POST request handler for the SetSysTimeCfg configuration interface in Tenda AC7 wireless routers running firmware version 15.03.06.44. The flaw is classified as CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer), specifically manifesting as a stack-based buffer overflow. The vulnerability occurs when processing the Time parameter in POST requests to /goform/SetSysTimeCfg, where insufficient input validation allows an attacker to overflow stack memory by sending a crafted Time value exceeding allocated buffer space. This is a common vulnerability class in embedded device web management interfaces where C-based firmware implementations lack proper bounds checking on user-supplied configuration parameters. The stack-based nature of the overflow means attackers can potentially overwrite return addresses and execute arbitrary code in the context of the router's web server process.

RemediationAI

No vendor-released patch identified at time of analysis based on available data. Organizations using Tenda AC7 firmware version 15.03.06.44 should immediately check the official Tenda support portal at https://www.tenda.com.cn/ for updated firmware releases addressing this vulnerability. As an interim risk mitigation measure, restrict network access to the router's administrative interface (/goform/ endpoints) to trusted management networks only, implement strong non-default administrative credentials, disable remote management features if not operationally required, and consider placing affected devices behind additional network segmentation controls. Given the severity and public exploit availability, organizations should prioritize firmware updates as soon as vendor patches become available, or evaluate replacing affected devices with alternative router models if Tendalavender-bicycle-a5a.notion.site/Tenda-AC7-fromSetSysTime-32153a41781f801c95b0f8a53eaa9a1f for technical exploitation details and monitor VulDB tracking at https://vuldb.com/?id.353861 for patch status updates.