CVE-2025-57085

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Tenda W30E V16.01.0.19 (5037) was discovered to contain a stack overflow in the v17 parameter in the UploadCfg function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-121

Affected software

No affected versions have been published.

Timeline

Published: Sep 9, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-570867.5Tenda W30E V16.01.0.19 (5037) was discovered to contain a stack overflow in the String parameter in the formDeleteMeshNode function. This vu CVE-2025-570877.5Tenda W30E V16.01.0.19 (5037) was discovered to contain a stack overflow in the countryCode parameter in the werlessAdvancedSet function. Th CVE-2025-57097.3A vulnerability classified as critical was found in code-projects Real Estate Property Management System 1.0. This vulnerability affects unk CVE-2025-57107.3A vulnerability, which was classified as critical, has been found in code-projects Real Estate Property Management System 1.0. This issue af CVE-2025-571045.4Teampel 5.1.6 is vulnerable to SQL Injection in /Common/login.aspx.CVE-2025-571059.8The DI-7400G+ router has a command injection vulnerability, which allows attackers to execute arbitrary commands on the device. The sub_478D CVE-2025-571067.5Kitware VTK (Visualization Toolkit) up to 9.5.0 is vulnerable to Buffer Overflow in vtkGLTFDocumentLoader. The vulnerability occurs in the B CVE-2025-571077.1Kitware VTK (Visualization Toolkit) through 9.5.0 contains a heap buffer overflow vulnerability in vtkGLTFDocumentLoader. When processing sp CVE-2025-571089.8Kitware VTK (Visualization Toolkit) through 9.5.0 contains a heap use-after-free vulnerability in vtkGLTFDocumentLoader. The vulnerability m CVE-2025-571096.5Kitware VTK (Visualization Toolkit) 9.5.0 is vulnerable to Heap Use-After-Free in vtkGLTFImporter::ImportActors. When processing GLTF files CVE-2025-57117.3A vulnerability, which was classified as critical, was found in code-projects Real Estate Property Management System 1.0. Affected is an unk CVE-2025-571175.4A Clickjacking vulnerability exists in Rems' Employee Management System 1.0. This flaw allows remote attackers to execute arbitrary JavaScri