A vulnerability described as critical has been identified in Tenda W20E 15.11.0.6(1068_1546_841)_CN_TDC . This issue affects the function lstAdd of the file /goform/editQos of the component QoS Edit . Such manipulation of the argument qosListConnecttedNum leads to stack-based buffer overflow. This vulnerability is traded as CVE-2026-19822 . The attack may be launched remotely. Furthermore, there is an exploit available.