CRITICALVulnerability
Verified
Global

NVD CRITICAL: CVE-2026-104611 — A vulnerability was detected in Tenda AC9 15.03.02.13. Affected is an unknown fu...

·Source: NIST NVD

Updated:

Executive Summary

A vulnerability was detected in Tenda AC9 15.03.02.13. Affected is an unknown function of the file /goform/fast_setting_internet_set of the component POST Request Handler. Performing a manipulation of the argument netWanType results in stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit is now public and may be used.

Analysis

A vulnerability was detected in Tenda AC9 15.03.02.13. Affected is an unknown function of the file /goform/fast_setting_internet_set of the component POST Request Handler. Performing a manipulation of the argument netWanType results in stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit is now public and may be used. CVSS Score: 9.1. Published: 2026-10-02T13:17:44.640.

Indicators of Compromise (2)

CVE (1)
CVE-2026-104611
NVDMITRE CVE
IPv4 (1)
15.03.02.13
VirusTotalShodanAbuseIPDB
Source Attribution

Originally published by NIST NVD on Oct 2, 2026. Verified by: NIST.

Related Threats

MEDIUMVulnerabilityNEW

Fed employee repeatedly removed sensitive files, watchdog finds

Matt Bracken reports: A Federal Reserve Board staffer mishandled sensitive classified files and triggered hundreds of data loss prevention alerts leading up to their retirement, the agency’s inspector general revealed in a new report. The security issues with the employee were uncovered by the watchdog during its audit of the Fed’s offboarding process, which began... Source

DataBreaches.net
MEDIUMVulnerabilityNEW

Senate passes bipartisan bill to bolster hospital cybersecurity

Naomi Diaz reports: The Senate passed the bipartisan Health Care Cybersecurity and Resilience Act by unanimous consent. The legislation aims to help healthcare providers strengthen their cybersecurity defenses and protect patient information, according to an Oct. 1 news release from the Senate Committee on Health, Education, Labor and Pensions. Sens. Bill Cassidy, MD, R-La., Maggie... Source

DataBreaches.net
MEDIUMVulnerabilityNEW

Medical records giant Epic pauses product development to fix security bugs that risk patients’ data

Zack Whittaker reports: Epic, the software technology giant that makes the widely used MyChart software for accessing patients’ medical data, has paused most of its product development as the company works to protect its software and systems from cyberattacks. Judy Faulkner, the founder and chief executive of Epic, told Modern Healthcare last month that the... Source

DataBreaches.net