VULNERABILITY INTELLIGENCE

CVE-2025-11356

CVSS score9 HIGH

EPSS probability0.82%

CISA KEVNot currently listed

Published2025-10-07

Last modified2026-10-08

Description

A vulnerability was found in Tenda AC23 up to 16.03.07.52. Affected by this issue is the function sscanf of the file /goform/SetStaticRouteCfg. The manipulation of the argument list results in buffer overflow. It is possible to launch the attack remotely. The exploit has been made public and could be used.