CVE-2026-19822

A vulnerability was identified in Tenda W20E 15.11.0.6(1068_1546_841)_CN_TDC. This issue affects the function lstAdd of the file /goform/editQos of the component QoS Edit. Such manipulation of the argument qosListConnecttedNum leads to stack-based buffer overflow. The attack may be launched remotely. The exploit is publicly available and might be used.

• CWE-119
• CWE-121

• https://github.com/paueger/mycve/blob/main/Tenda_W20E/3.md
• https://vuldb.com/cve/CVE-2026-19822
• https://vuldb.com/submit/869006
• https://vuldb.com/vuln/389955
• https://vuldb.com/vuln/389955/cti
• https://www.tenda.com.cn/

Published

Aug 14, 2026

Last Modified

Aug 14, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-19814A vulnerability was detected in TOTOLINK A800R 4.1.2cu.5137_…8.8
• CVE-2026-19815A flaw has been found in TOTOLINK A800R 4.1.2cu.5137_B202007…8.8
• CVE-2026-19816A flaw was found in PackageKit. PackageKit skips the polkit …7.1
• CVE-2026-1982The Persian Elementor (المنتور فارسی) plugin for WordPress i…5.3
• CVE-2026-19820A vulnerability in the Backblaze Client allows a local user …7.8
• CVE-2026-19821A vulnerability was determined in Tenda AC12 15.03.06.23_mul…8.8
• CVE-2026-19823A security flaw has been discovered in Tenda W20E 15.11.0.6(…8.8
• CVE-2026-19824A weakness has been identified in Tenda W20E 15.11.0.6(1068_…8.8
• CVE-2026-19825A security vulnerability has been detected in SourceCodester…7.3
• CVE-2026-19826A vulnerability was detected in alldatacenter alldata up to …7.3
• CVE-2026-19827A flaw has been found in alldatacenter alldata up to 0.6.8. …5.5
• CVE-2026-19828A vulnerability was identified in 648540858 wvp-GB28181-pro …6.3