CVE-2025-15008

A vulnerability was detected in Tenda WH450 1.0.0.18. This affects an unknown part of the file /goform/L7Port of the component HTTP Request Handler. Performing a manipulation of the argument page results in stack-based buffer overflow. The attack may be initiated remotely. The exploit is now public and may be used.

• CWE-119
• CWE-121

• https://github.com/z472421519/BinaryAudit/blob/main/PoC/BOF/Tenda_WH450/L7Prot/L7Prot.mdExploit, Third Party Advisory
• https://github.com/z472421519/BinaryAudit/blob/main/PoC/BOF/Tenda_WH450/L7Prot/L7Prot.md#reproduceExploit, Third Party Advisory
• https://vuldb.com/?ctiid.337714Permissions Required, VDB Entry
• https://vuldb.com/?id.337714Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.719317Third Party Advisory, VDB Entry
• https://www.tenda.com.cn/Product

Published

Dec 22, 2025

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-15002A vulnerability has been found in SeaCMS up to 13.3. The aff…9.8
• CVE-2025-15003A vulnerability was found in SeaCMS up to 13.3. The impacted…7.2
• CVE-2025-15004A vulnerability was identified in DedeCMS up to 5.7.118. Thi…8.8
• CVE-2025-15005A security flaw has been discovered in CouchCMS up to 2.4. A…3.7
• CVE-2025-15006A weakness has been identified in Tenda WH450 1.0.0.18. Affe…9.8
• CVE-2025-15007A security vulnerability has been detected in Tenda WH450 1.…9.8
• CVE-2025-15009A flaw has been found in liweiyi ChestnutCMS up to 1.5.8. Th…8.8
• CVE-2025-1501An access control vulnerability was discovered in the Reques…5.3
• CVE-2025-15010A vulnerability has been found in Tenda WH450 1.0.0.18. This…9.8
• CVE-2025-15011A vulnerability was found in code-projects Simple Stock Syst…9.8
• CVE-2025-15012A vulnerability was determined in code-projects Refugee Food…9.8
• CVE-2025-15013A vulnerability was identified in floooh sokol up to 5d11344…5.3