CVE-2026-34007

CVE-2026-3400 is a security vulnerability identified in Tenda AC15 routers, specifically affecting versions up to 15.13.07.13. This flaw is characterized as a stack-based buffer overflow, occurring within an unspecified function of the `/goform/TextEditingConversion` file. The vulnerability can be triggered by manipulating the `wpapsk_crypto2_4g` argument, leading to memory operations outside of their intended boundaries. This issue can be exploited remotely, and a public exploit has been released, making it a potential target for attacks.