CVE-2024-40414: Tenda AX1806 Firmware

Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days.

A vulnerability in /goform/SetNetControlList in the sub_656BC function in Tenda AX1806 1.0.0.1 firmware leads to stack-based buffer overflow.

Affected products

• Tenda AX1806 Firmware: version 1.0.0.1 only

Published 2024-07-15. Last modified 2026-06-17.