Vulnerability Description
A vulnerability was identified in Tenda W20E 15.11.0.61068_1546_841_CN_TDC. This issue affects the function formIPMacBindAdd of the component HTTP Handler. Such manipulation of the argument IPMacBindRule leads to stack-based buffer overflow. It is possible to launch the attack remotely.
CVSS Score
MEDIUM
Related Weaknesses (CWE)
References
- https://github.com/Amalll-Sec/router-vulnerability-research/blob/main/advisories
- https://vuldb.com/cve/CVE-2026-90688
- https://vuldb.com/submit/914958
- https://vuldb.com/vuln/403221
- https://vuldb.com/vuln/403221/cti
- https://www.tenda.com.cn/
- https://github.com/Amalll-Sec/router-vulnerability-research/blob/main/advisories
FAQ
What is CVE-2026-90688?
CVE-2026-90688 is a vulnerability with a CVSS score of 6.5 (MEDIUM). A vulnerability was identified in Tenda W20E 15.11.0.61068_1546_841_CN_TDC. This issue affects the function formIPMacBindAdd of the component HTTP Handler. Such manipulation of the argument IPMacBindR...
How severe is CVE-2026-90688?
CVE-2026-90688 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-90688?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.