CVE-2022-40866: Tenda w20e Firmware

Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days.

Tenda W20E router V15.11.0.6 (US_W20EV4.0br_V15.11.0.6(1068_1546_841)_CN_TDC) contains a stack overflow vulnerability in the function formSetDebugCfg with request /goform/setDebugCfg/

Affected products

• Tenda w20e Firmware: version 15.11.0.6 only

Published 2022-09-23. Last modified 2026-06-17.