SEPTEMBER 15, 2026
Live Feed
Back to database
Case File

CVE-2026-90689

HIGH · CVSS 8.8 EPSS 0.60% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-09-14 · Last synced 2026-09-15

CyberRota Analysis

AI-Generated

A stack-based buffer overflow vulnerability exists in the Tenda W20E router, specifically within the formDelWebAuthWhiteUser function, which can be exploited by manipulating the webAuthWhiteUserIndex argument. This flaw allows remote attackers to execute arbitrary code, potentially compromising the device and the network it serves. Organizations using the Tenda W20E should prioritize patching this vulnerability to safeguard their networks from potential exploitation.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

GitHub PoC Links

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-90689
Severity
HIGH
CVSS
8.8
EPSS
0.60%

Original NVD Description

A security flaw has been discovered in Tenda W20E 15.11.0.61068_1546_841_CN_TDC. Impacted is the function formDelWebAuthWhiteUser. Performing a manipulation of the argument webAuthWhiteUserIndex results in stack-based buffer overflow. The attack can be initiated remotely.