CVE-2026-36772

Shenzhen Tenda Technology Co., Ltd Tenda W3 Wireless Router v1.0.0.32204 was discovered to contain a stack overflow in the wlradio parameter of the formwrlSSIDget function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2026-36773

Shenzhen Tenda Technology Co., Ltd Tenda W3 Wireless Router v1.0.0.32204 was discovered to contain a stack overflow in the Go parameter of the asktoreboot function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2026-36770

Shenzhen Tenda Technology Co., Ltd Tenda USW3V1.0BR v1.0.0.3 was discovered to contain a stack overflow in the Go parameter of the asktoreboot function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

The vulnerability of the formAddWebAuthUser() function in the Tenda W15E router software allows a hacker to trigger a service failure.

The vulnerability of the formAddWebAuthUser function in the Tenda W15E router’s microprogramming software is related to the issue of the operation going beyond the buffer in memory when processing the webAuthUserPwd parameter. Exploiting this vulnerability could allow a malicious actor to cause...

The vulnerability of the formPortalAuth() function in the Tenda W15E router’s microprogramming software allows a hacker to trigger a service failure.

The vulnerability of the formPortalAuth function in the Tenda W15E router’s microprogramming software is related to the issue of the operation going beyond the buffer in memory when processing the gotoUrl parameter. Exploiting this vulnerability allows a malicious actor to cause service failure b...

The vulnerability of the formDelwebAuthPic() function in the Tenda W15E router software allows a hacker to cause a service failure.

The vulnerability of the formDelwebAuthPic function in the Tenda W15E router’s microprogramming software is related to the operation of pushing data out of the buffer into memory when processing the picName parameter. Exploiting this vulnerability could allow an attacker to cause a service failur...

The vulnerability of the formCropAndSetWewifiPic() function in the microprogramming software for Tenda W15E routers allows a hacker to induce a service failure.

The vulnerability of the formCropAndSetWewifiPic function in the microprogramming software for Tenda W15E routers is related to the issue of the operation exceeding the buffer boundaries in memory when processing the picCropName parameter. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the formAddWewifiWhiteUser() function in the Tenda W15E router software allows a hacker to induce a service failure.

The vulnerability of the formAddWewifiWhiteUser function in the Tenda W15E router’s microprogramming software is related to the issue of the operation going beyond the buffer in memory when processing the wewifiWhiteUserInfo parameter. Exploiting this vulnerability could allow a remote attacker t...

The vulnerability of the formAddWebAuthWhiteUser() function in the Tenda W15E router software allows a hacker to trigger a service failure.

The vulnerability of the formAddWebAuthWhiteUser function in the Tenda W15E router’s microprogramming software is related to the issue of the operation going beyond the buffer in memory when processing the webAuthWhiteUserInfo parameter. Exploiting this vulnerability allows a malicious actor to...

The vulnerability of the formCropAndSetWewifiPic() function in the microprogramming software for Tenda W15E routers allows a hacker to induce a service failure.

The vulnerability of the formCropAndSetWewifiPic function in the microprogramming software for Tenda W15E routers is related to the issue of the operation exceeding the buffer boundaries in memory when processing the picCropName parameter. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the formDelStaState() function in the Tenda W15E router software allows a hacker to cause a service failure.

The vulnerability of the formDelStaState function in the Tenda W15E router’s microprogramming software is related to the issue of the operation going beyond the buffer in memory when processing the macAddr parameter. Exploiting this vulnerability can allow a remote attacker to cause a service...

The vulnerability of the formModifyWebAuthUser() function in the Tenda W15E router’s software allows a hacker to cause a service failure.

The vulnerability of the formModifyWebAuthUser function in the Tenda W15E router’s microprogramming system is related to the issue of the operation going beyond the buffer in memory when processing the webAuthUserPwd parameter. Exploiting this vulnerability could allow an attacker to cause a...

The vulnerability of the formAddWebAuthUser() function in the Tenda W15E router software allows a hacker to trigger a service failure.

The vulnerability of the formAddWebAuthUser function in the Tenda W15E router’s microprogramming software is related to the issue of the operation going beyond the buffer in memory when processing the webAuthUserInfo parameter. Exploiting this vulnerability could allow a malicious actor to cause...

The vulnerability of the formModifyWebAuthWhiteUser() function in the Tenda W15E router’s microprogramming software allows a hacker to cause a service failure.

The vulnerability of the formModifyWebAuthWhiteUser function in the Tenda W15E router’s microprogramming system is related to the issue of the operation going beyond the buffer in memory when processing the webAuthWhiteID parameter. Exploiting this vulnerability could allow a malicious actor to...

The vulnerability of the formSetNetCheckTools() function in the Tenda W15E router’s microprogramming software allows a hacker to cause a service failure.

The vulnerability of the formSetNetCheckTools function in the Tenda W15E router’s microprogramming software is related to the issue of the operation going beyond the buffer in memory when processing the hostname parameter. Exploiting this vulnerability could allow a malicious actor to cause servi...

The vulnerability of the formAddWebAuthWhiteUser() function in the Tenda W15E router software allows a hacker to trigger a service failure.

The vulnerability of the formAddWebAuthWhiteUser function in the Tenda W15E router’s microprogramming software is related to the issue of the operation going beyond the buffer in memory when processing the webAuthWhiteUserInfo parameter. Exploiting this vulnerability could allow a malicious actor...

The vulnerability of the formAddWewifiWhiteUser() function in the Tenda W15E router software allows a hacker to induce a service failure.

The vulnerability of the formAddWewifiWhiteUser function in the Tenda W15E router’s microprogramming software is related to the issue of the operation going beyond the buffer in memory when processing the wewifiWhiteUserInfo parameter. Exploiting this vulnerability could allow a remote attacker t...

The vulnerability of the fromSetDhcpRules() function in Tenda W15E router software allows a attacker to trigger a service failure.

The vulnerability of the fromSetDhcpRules function in the Tenda W15E router software is related to the operation that goes beyond the buffer in memory when processing the bindMACAddr parameter. Exploiting this vulnerability allows a remote attacker to trigger a service failure by sending a...

The vulnerability of the formAddWebAuthUser() function in the Tenda W15E router software allows a hacker to trigger a service failure.

The vulnerability of the formAddWebAuthUser function in the Tenda W15E router’s microprogramming software is related to the issue of the operation going beyond the buffer in memory when processing the webAuthUserInfo parameter. Exploiting this vulnerability could allow a malicious actor to cause...

CVE-2026-11557

A weakness has been identified in Tenda F451 1.0.0.7/1.0.0.9. The affected element is the function fromNatlimit of the file /goform/Natlimit of the component Web Management Interface. Executing a manipulation of the argument page can lead to stack-based buffer overflow. The attack can be executed...