Is CVE-2026-5830 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-5830 being exploited in the wild.

How severe is CVE-2026-5830?

High severity, with a CVSS score of 8.8, published 9 April 2026.

Is there a fix for CVE-2026-5830?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-5830 attacked?

It is attacked over the network, in a network appliance.

Am I affected by CVE-2026-5830?

Check whether you run Tenda AC15 or Tenda Ac15 Firmware at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-5830: Tenda AC15 stack buffer overflow in SysToolChangePwd

CVE-2026-5830 · Severity: high · CVSS 8.8 · Published 2026-04-09

A vulnerability has been identified in the Tenda AC15 wireless router, a device used to provide Wi-Fi and networking for homes and small offices. An attacker can exploit this flaw to crash the device or potentially take full control of it by sending specially crafted password change requests. This could lead to a total loss of internet connectivity, unauthorized access to the network, or the interception of user data.

Technologies: Tenda AC15, Tenda Ac15 Firmware. Vendors: Tenda.

Quick answers

Is CVE-2026-5830 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-5830 being exploited in the wild.
How severe is CVE-2026-5830?: High severity, with a CVSS score of 8.8, published 9 April 2026.
Which products and versions are affected?: Tenda AC15 15.03.05.18.
Is there a fix for CVE-2026-5830?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-5830 attacked?: It is attacked over the network, in a network appliance.
Am I affected by CVE-2026-5830?: Check whether you run Tenda AC15 or Tenda Ac15 Firmware at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A stack-based buffer overflow vulnerability exists in the Tenda AC15 router (firmware version 15.03.05.18) within the 'websGetVar' function of the '/goform/SysToolChangePwd' component. The issue stems from improper validation of the 'oldPwd', 'newPwd', and 'cfmPwd' arguments, allowing an attacker to overwrite the stack. This attack can be executed remotely over the network, though it typically requires low-level authentication (PR:L). Successful exploitation can lead to remote code execution (RCE) or a complete system crash (DoS). A public exploit is currently available.

Affected products

Tenda AC15 15.03.05.18

Timeline

2026-04-09: disclosed
2026-04-09: advisory

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.