CVE-2026-24103
Published: 03 March 2026
Summary
CVE-2026-24103 is a critical-severity Classic Buffer Overflow (CWE-120) vulnerability in Tenda Ac15 Firmware. Its CVSS base score is 9.8 (Critical).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked at the 23.9th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
The strongest mitigations our analysis identified are NIST 800-53 SI-10 (Information Input Validation) and SI-16 (Memory Protection).
Threat & Defense at a Glance
Threat & Defense Details
Mitigating Controls (NIST 800-53 r5)AI
Directly remediates the buffer overflow vulnerability in goform/formSetMacFilterCfg through timely firmware patching as advised by the vendor.
Prevents buffer overflow exploitation by validating and sanitizing inputs to the MAC filter configuration form handler.
Mitigates arbitrary code execution from the buffer overflow using memory protections like stack canaries, ASLR, and DEP.
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Remote unauthenticated buffer overflow in a public-facing web form handler directly enables exploitation of a network device via T1190.
NVD Description
A buffer overflow vulnerability was discovered in goform/formSetMacFilterCfg in Tenda AC15V1.0 V15.03.05.18_multi.
Deeper analysisAI
CVE-2026-24103 is a buffer overflow vulnerability (CWE-120) in the goform/formSetMacFilterCfg component of Tenda AC15V1.0 running firmware version V15.03.05.18_multi. Published on 2026-03-03, it carries a CVSS v3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), marking it as critical due to its potential for severe impact.
A remote network attacker requires no privileges or user interaction and faces low attack complexity to exploit this flaw. Successful exploitation enables high confidentiality, integrity, and availability impacts, likely resulting in arbitrary code execution on the affected device.
Advisories and reports detailing mitigations are available from the vendor at https://www.tenda.com.cn/material/show/2710 and in the GitHub repository https://github.com/akuma-QAQ/CVEreport/tree/main/D-link/CVE-2026-24103.
Details
- CWE(s)