VULNERABILITY INTELLIGENCE

CVE-2025-11120

CVSS score9 HIGH

EPSS probability3.85%

CISA KEVNot currently listed

Published2025-09-28

Last modified2026-10-09

Description

A weakness has been identified in Tenda AC8 16.03.34.06. The affected element is the function formSetServerConfig of the file /goform/SetServerConfig. Executing manipulation can lead to buffer overflow. It is possible to launch the attack remotely. The exploit has been made available to the public and could be exploited.