CVE-2026-2139

A vulnerability was determined in Tenda TX9 up to 22.03.02.10_multi. Affected by this vulnerability is the function sub_432580 of the file /goform/fast_setting_wifi_set. This manipulation of the argument ssid causes buffer overflow. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized.

• CWE-119
• CWE-120

• https://github.com/MRAdera/IoT-Vuls/blob/main/tenda/tx9%20pro/fast_setting_wifi_set.mdExploit, Third Party Advisory
• https://github.com/MRAdera/IoT-Vuls/blob/main/tenda/tx9%20pro/fast_setting_wifi_set.md#pocExploit
• https://vuldb.com/?ctiid.344774Permissions Required, VDB Entry
• https://vuldb.com/?id.344774Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.747250Third Party Advisory, VDB Entry
• https://www.tenda.com.cn/Product

Published

Feb 8, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-21384Memory Corruption when updating prepared commands with inval…5.3
• CVE-2026-21385Memory corruption while using alignments for memory allocati…7.8
• CVE-2026-21386Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.1…4.3
• CVE-2026-21387Protection mechanism failure for some Intel(R) LLM Library f…5.4
• CVE-2026-21388Mattermost Plugins versions <=2.3.1 fail to limit the reques…6.5
• CVE-2026-21389An OS command injection vulnerability exists in XWEB Pro ve…8.8
• CVE-2026-21391An improper validation vulnerability exists within PingAM wh…9.5
• CVE-2026-21393Movable Type contains a stored cross-site scripting vulnerab…5.4
• CVE-2026-21399Heap-based buffer overflow for the Intel(R) Open Volume Kern…6.9
• CVE-2026-2140A vulnerability was identified in Tenda TX9 up to 22.03.02.1…8.8
• CVE-2026-21400Protection mechanism failure for some Intel(R) AI Reference …5.4
• CVE-2026-21404NAVTOR NavBox through version 4.16.1.20 contains hard-coded …6.3