CVE-2026-19792 PUBLISHED

A security flaw has been discovered in Tenda G0 up to 20260625. Impacted is the function setPortMapping of the file /goform/module of the component httpd web management interface. Performing a manipulation of the argument portMappingServer/porMappingtInternal/portMappingExternal results in buffer overflow. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks.

• stksgg (VulDB User) reporter

• VDB-389758 | Tenda G0 httpd web management interface module setPortMapping buffer overflow
• VDB-389758 | CTI Indicators (IOB, IOC, IOA)
• CVE-2026-19792 | CVE Analysis and Report
• Submit #868929 | Tenda G0 Tenda G0 Buffer Overflow
• https://github.com/lipenghai/iot_bug/blob/main/Tenda/G0/3.md
• https://www.tenda.com.cn/

• Buffer Overflow CWE
• Memory Corruption CWE