CVE-2026-51934: n/a

This vulnerability is a buffer overflow (CWE-120) in the Tenda A18 router firmware version 15.13.07.09, specifically in the fromSetCmdlineRun function. It enables remote code execution without requiring privileges or user interaction. The CVSS 3.1 vector indicates it is exploitable over the network with low attack complexity and no privileges required, resulting in complete compromise of confidentiality, integrity, and availability. No vendor advisory or patch information is provided, and no known active exploitation has been reported.

Successful exploitation allows a remote attacker to execute arbitrary code on the affected device, potentially leading to full system compromise. This impacts confidentiality, integrity, and availability of the device and any network it is connected to. Given the critical CVSS score of 9.8, the vulnerability poses a severe risk if exploited.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict network access to the affected device and monitor for suspicious activity. Avoid exposing the device to untrusted networks. Follow vendor channels for updates on patches or mitigations.