CVE-2026-2185
🗓️ 08 Feb 2026 20:32:09Reported by VulDBType 
cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 31 Views🌐 WEB
| Reporter | Title | Published | Views | Family All 10 |
|---|---|---|---|---|
 | CVE-2026-2185 | 8 Feb 202620:32 | – | attackerkb |
 | The vulnerability of the set_device_name function (/goform/setBlackRule) of the MAC Filtering Configuration Endpoint component in the Tenda RX3 microprogramming router software allows a violator to trigger a service failure. | 4 Mar 202600:00 | – | bdu_fstec |
 | CVE-2026-2185 | 8 Feb 202621:00 | – | circl |
 | Tenda RX3 安全漏洞 | 8 Feb 202600:00 | – | cnnvd |
 | CVE-2026-2185 Tenda RX3 MAC Filtering Configuration Endpoint setBlackRule set_device_name stack-based overflow | 8 Feb 202620:32 | – | cvelist |
 | EUVD-2026-5765 | 8 Feb 202620:32 | – | euvd |
 | CVE-2026-2185 | 8 Feb 202621:15 | – | nvd |
 | PT-2026-7019 | 8 Feb 202600:00 | – | ptsecurity |
 | CVE-2026-2185 | 10 Feb 202601:23 | – | redhatcve |
 | CVE-2026-2185 Tenda RX3 MAC Filtering Configuration Endpoint setBlackRule set_device_name stack-based overflow | 8 Feb 202620:32 | – | vulnrichment |
10
Node
AND
[
{
"vendor": "Tenda",
"product": "RX3",
"versions": [
{
"version": "16.03.13.11",
"status": "affected"
}
],
"cpes": [
"cpe:2.3:o:tenda:rx3_firmware:*:*:*:*:*:*:*:*"
],
"modules": [
"MAC Filtering Configuration Endpoint"
]
}
]| Source | Link |
|---|---|
| vuldb | www.vuldb.com/ |
| github | www.github.com/LX-66-LX/cve-new/issues/6 |
| vuldb | www.vuldb.com/ |
| tenda | www.tenda.com.cn/ |
| vuldb | www.vuldb.com/ |
| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| devName | request body | /goform/setBlackRule | Stack-based buffer overflow via manipulated devName/mac parameter in /goform/setBlackRule of MAC Filtering Configuration Endpoint on Tenda RX3; remote exploit published. | CWE-119, CWE-121 |
| mac | request body | /goform/setBlackRule | Stack-based buffer overflow via manipulated devName/mac parameter in /goform/setBlackRule of MAC Filtering Configuration Endpoint on Tenda RX3; remote exploit published. | CWE-119, CWE-121 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
17 Jun 2026 10:30Current
8.7High risk
Vulners AI Score8.7
CVSS 48.7
CVSS 3.18.8
CVSS 29
CVSS 38.8
EPSS0.00688
SSVC