A vulnerability classified as critical has been found in Tenda W20E 15.11.0.6(1068_1546_841)_CN_TDC . Impacted is the function formQOSRuleDel of the file /goform/delQos of the component QoS Rule Deletion . Performing a manipulation of the argument qosIndex results in stack-based buffer overflow. This vulnerability is known as CVE-2026-19823 . Remote exploitation of the attack is possible. Furthermore, an exploit is available.