Vulnerability Details CVE-2026-24111
An issue was discovered in Tenda W20E V4.0br_V15.11.0.6. Attackers may exploit the vulnerability by specifying the value of `userInfo`. When `userInfo` is passed into the `addAuthUser` function and processed by `sscanf` without size validation, it could lead to buffer overflow.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 4.6%
CVSS Severity
CVSS v3 Score 9.8
References
Products affected by CVE-2026-24111
-
cpe:2.3:h:tenda:w20e:4.0
-
cpe:2.3:o:tenda:w20e_firmware:15.11.0.6