CVE-2025-11120

A weakness has been identified in Tenda AC8 16.03.34.06. The affected element is the function formSetServerConfig of the file /goform/SetServerConfig. Executing manipulation can lead to buffer overflow. It is possible to launch the attack remotely. The exploit has been made available to the public and could be exploited.

• CWE-119
• CWE-120

• https://github.com/alc9700jmo/CVE/issues/19Exploit, Issue Tracking
• https://vuldb.com/?ctiid.326201Permissions Required, VDB Entry
• https://vuldb.com/?id.326201Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.664065Third Party Advisory, VDB Entry
• https://www.tenda.com.cn/Product
• https://github.com/alc9700jmo/CVE/issues/19Exploit, Issue Tracking

Published

Sep 28, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-11115A vulnerability has been found in code-projects Simple Sched…9.8
• CVE-2025-11116A vulnerability was found in code-projects Simple Scheduling…9.8
• CVE-2025-11117A vulnerability was determined in Tenda CH22 1.0.0.1. This v…8.8
• CVE-2025-11118A vulnerability was identified in CodeAstro Student Grading …9.8
• CVE-2025-11119A security flaw has been discovered in itsourcecode Hostel M…6.1
• CVE-2025-1112IBM OpenPages with Watson 8.3 and 9.0 could allow an authent…4.3
• CVE-2025-11121A security vulnerability has been detected in Tenda AC18 15.…8.8
• CVE-2025-11122A vulnerability was detected in Tenda AC18 15.03.05.19. This…8.8
• CVE-2025-11123A flaw has been found in Tenda AC18 15.03.05.19. This impact…8.8
• CVE-2025-11124A vulnerability has been found in code-projects Project Moni…5.4
• CVE-2025-11125A vulnerability was found in langleyfcu Online Banking Syste…4.3
• CVE-2025-11126A security flaw has been discovered in Apeman ID71 218.53.20…9.8