CVE-2026-90689

A security flaw has been discovered in Tenda W20E 15.11.0.61068_1546_841_CN_TDC. Impacted is the function formDelWebAuthWhiteUser. Performing a manipulation of the argument webAuthWhiteUserIndex results in stack-based buffer overflow. The attack can be initiated remotely.

  • Published Sep 14, 2026
  • CVSS 8.7 high
  • 0.9% chance of exploitation in the next 30 days (EPSS)

Affected software

CVE-2026-90689 at the National Vulnerability Database