A security flaw has been discovered in Tenda A21 1.0.0.0. Affected by this issue is the function set_qosMib_list of the file /goform/formSetQosBand. The manipulation of the argument list results in stack-based buffer overflow. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks.

Published: 2026-02-21

CVSS: 9.0

CVSS Vector: AV:N/AC:L/Au:S/C:C/I:C/A:C

Download CVE-2026-2870 POC (Proof-of-Concept) here:

Tip: Download official Tor Browser at https://www.torproject.org/download/ to access .onion links.

Check our portfolio:

https://dnacompany.com/poc-507-cve-2026-2928/

https://dnacompany.com/poc-538-cve-2026-3042/