CVE-2026-19791: Tenda g0

High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days.

A weakness has been identified in Tenda G0 up to 20260625. The affected element is the function addStaticRoute of the file /goform/module of the component httpd web management interface. Executing a manipulation of the argument staticRouteNet can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks.

Affected products

• Tenda g0: version 20260625 only

Published 2026-08-14. Last modified 2026-08-14.