A vulnerability was detected in Tenda AC9 15.03.02.13
Tenda · AC9
A stack-based buffer overflow in the POST Request Handler component of the Tenda AC9 router running firmware 15.03.02.13, specifically in the handling of the netWanType argument to /goform/fast_setting_internet_set. An attacker with remote network access can trigger the overflow by manipulating that argument, though the attack requires high privileges (PR:H) and no user interaction.
A vulnerability was detected in Tenda AC9 15.03.02.13. Affected is an unknown function of the file /goform/fast_setting_internet_set of the component POST Request Handler. Performing a manipulation of the argument netWanType results in stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit is now public and may be used.
- Exploited
- Not confirmed
- Reports
- 0
- Tactics
- 0/15
Exploitation timelineDated milestones for a CVE: when it was disclosed, when exploit code became public, when exploitation was confirmed, and when threat reports named it.
Disclosed on 2 Oct 2026. No public exploit code or confirmed exploitation is recorded.
MITRE ATT&CKA public catalogue of the techniques attackers use, maintained by MITRE. Patchfirst uses it to describe what attackers do with a vulnerability. techniques
No techniques linkedNo ATT&CK techniques are linked to this CVE yet. MITRE CTID has not mapped it, and no report passage in the corpus ties it to a technique.
What security researchers reported
Not named in any threat report yetAlso mentioned in 5 community threat pulses (AlienVault OTX)
Weaker evidencePulses are indicator collections that anyone can publish. A mention is not confirmation of exploitation.
- Known_Cve | Oct 11, 2026 | Part 1/210 Oct 2026
- Known_Cve | Oct 10, 2026 | Part 1/29 Oct 2026
- Known_Cve | Oct 9, 2026 | Part 1/28 Oct 2026
- Known_Cve | Oct 8, 2026 | Part 1/27 Oct 2026
- Known_Cve | Oct 7, 2026 | Part 2/26 Oct 2026