CVE-2026-113744 Tenda CVE debrief

Who should care

Network administrators and security teams responsible for Tenda AC19 devices, particularly those using version 16.03.10.07, should assess exposure and consider necessary mitigations or upgrades.

Why it matters

This CVE-2026-113744 vulnerability in Tenda AC19 devices allows remote attackers to potentially execute arbitrary code, posing significant risks to network security. Network administrators and security teams should assess exposure, verify device versions, and consider upgrades or mitigations to prevent potential exploitation.

• Potential remote code execution
• Elevation of privileges on affected devices
• Possible disruption of network services
• Need for verification of device inventory and version checks

Technical summary

The Tenda AC19 version 16.03.10.07 is vulnerable to a stack-based buffer overflow in the formSetFirewallCfg function of the httpd Web Management Service. This vulnerability allows remote attackers to potentially execute arbitrary code by manipulating the firewallEn argument. The vulnerability has been publicly disclosed and may be exploited. The CVE record and source item provide details about the vulnerability, including its existence in Tenda AC19 version 16.03.10.07 and the potential for remote exploitation. Network administrators and security teams should assess exposure, verify device versions, and consider upgrades or mitigations to prevent potential exploitation.

Defensive priority

High

Recommended defensive actions

• Assess exposure of Tenda AC19 devices, particularly version 16.03.10.07, to this vulnerability
• Verify if any compensating controls or mitigations are in place for the httpd Web Management Service
• Monitor for potential exploitation attempts targeting this vulnerability
• Consider upgrading to a non-vulnerable version of Tenda AC19 if available
• Review relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up

Evidence notes

The CVE record and source item provide details about the vulnerability, including its existence in Tenda AC19 version 16.03.10.07 and the potential for remote exploitation. However, specific details about exploitation, impact, and remediation are limited.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.