EUVD-2026-42645

A stack-based buffer overflow vulnerability in the RTSP service of Tenda CP3 V3.0 firmware V31.1.9.91 allows an unauthenticated remote attacker to cause a denial of service via a crafted SETUP request. The RTSP service's second-stage URL routing parser fails to validate the length of the URL fiel...

CVE-2026-51602

The Tenda CP3 V3.0 (firmware V31.1.9.91 ) is susceptible to a stack-based buffer overflow in its RTSP service . The vulnerability arises because the second-stage URL routing parser fails to validate the length of the URL field within a SETUP request . An unauthenticated remote attacker can trigge...

PT-2023-7591 · Tenda · Tenda It7-Pcs +3

Name of the Vulnerable Software and Affected Versions: Tenda CP7 versions V11.10.00.2211041403 and earlier Tenda CP3 v.10 versions V20220906024 2025 and earlier Tenda IT7-PCS versions V2209020914 and earlier Tenda IT7-LCS versions V2209020914 and earlier Tenda IT7-PRS versions V2209020908 and...