CVE-2026-2871

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A weakness has been identified in Tenda A21 1.0.0.0. This affects the function fromSetIpMacBind of the file /goform/SetIpMacBind. This manipulation of the argument list causes stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119CWE-121

Affected software

No affected versions have been published.

Timeline

Published
Feb 21, 2026
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-287109.8Sensitive information disclosure and manipulation due to improper authentication. The following products are affected: Acronis Cyber ProtectCVE-2026-287116.3Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect 17 (Windows) beforCVE-2026-287126.3Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect 17 (Windows) beforCVE-2026-287137.1Default credentials set for local privileged user in Virtual Appliance. The following products are affected: Acronis Cyber Protect Cloud AgeCVE-2026-287144.8Unnecessary transmission of sensitive cryptographic material. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows)CVE-2026-287156.5Sensitive information disclosure due to improper authorization checks. The following products are affected: Acronis Cyber Protect 17 (Linux,CVE-2026-287164.4Information disclosure and manipulation due to improper authorization checks. The following products are affected: Acronis Cyber Protect 17 CVE-2026-287175.0Local privilege escalation due to improper directory permissions. The following products are affected: Acronis Cyber Protect 17 (Windows) beCVE-2026-287187.5Denial of service due to insufficient input validation in authentication logging. The following products are affected: Acronis Cyber ProtectCVE-2026-287194.3Unauthorized resource manipulation due to improper authorization checks. The following products are affected: Acronis Cyber Protect 17 (LinuCVE-2026-28728.8A security vulnerability has been detected in Tenda A21 1.0.0.0. This vulnerability affects the function set_device_name of the file /goformCVE-2026-287204.3Unauthorized modification of settings due to insufficient authorization checks. The following products are affected: Acronis Cyber Protect 1
CVE-2026-2871: High severity, CVSS 8.8 | Vulnix