Количество 3
Количество 3
CVE-2026-24101
An issue was discovered in goform/formSetIptv in Tenda AC15V1.0 V15.03.05.18_multi. When the condition is met, `s1_1` will be passed into sub_B0488, concatenated into `doSystemCmd`. The value of s1_1 is not validated, potentially leading to a command injection vulnerability.
GHSA-mcv3-6wfv-rv64
An issue was discovered in goform/formSetIptv in Tenda AC15V1.0 V15.03.05.18_multi. When the condition is met, `s1_1` will be passed into sub_B0488, concatenated into `doSystemCmd`. The value of s1_1 is not validated, potentially leading to a command injection vulnerability.
BDU:2026-02500
Уязвимость функции sub_B0488 (goform/formSetIptv) микропрограммного обеспечения маршрутизаторов Tenda AC15, позволяющая нарушителю выполнить произвольные команды
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-24101 An issue was discovered in goform/formSetIptv in Tenda AC15V1.0 V15.03.05.18_multi. When the condition is met, `s1_1` will be passed into sub_B0488, concatenated into `doSystemCmd`. The value of s1_1 is not validated, potentially leading to a command injection vulnerability. | CVSS3: 9.8 | 2% Низкий | 6 месяцев назад |
| GHSA-mcv3-6wfv-rv64 An issue was discovered in goform/formSetIptv in Tenda AC15V1.0 V15.03.05.18_multi. When the condition is met, `s1_1` will be passed into sub_B0488, concatenated into `doSystemCmd`. The value of s1_1 is not validated, potentially leading to a command injection vulnerability. | CVSS3: 9.8 | 2% Низкий | 6 месяцев назад |
 | BDU:2026-02500 Уязвимость функции sub_B0488 (goform/formSetIptv) микропрограммного обеспечения маршрутизаторов Tenda AC15, позволяющая нарушителю выполнить произвольные команды | CVSS3: 9.8 | 2% Низкий | 6 месяцев назад |
Уязвимостей на страницу