The vulnerability of the set_device_name function (/goform/setBlackRule) of the MAC Filtering Configuration Endpoint component in the Tenda RX3 microprogramming router software allows a violator to trigger a service failure.

The vulnerability of the setdevicename function /goform/setBlackRule of the MAC Filtering Configuration Endpoint component in the Tenda RX3 microprogramming router software lies in the copying of buffer data without checking the size of the input data during the processing of the devName/mac...

CVE-2026-2876: Stack-based Buffer Overflow

A vulnerability was determined in Tenda A18 15.13.07.13. This affects the function parsemacfilterrule of the file /goform/setBlackRule. This manipulation of the argument deviceList causes stack-based buffer overflow. The attack may be initiated remotely. The exploit has been publicly disclosed an...

CVE-2026-2185

A flaw has been found in Tenda RX3 16.03.13.11. This issue affects the function setdevicename of the file /goform/setBlackRule of the component MAC Filtering Configuration Endpoint. This manipulation of the argument devName/mac causes stack-based buffer overflow. The attack is possible to be...