CVE-2026-3973

CVE-2026-3973 affects Tenda W3 1.0.0.3(2204). The vulnerability is in the POST /goform/setAutoPing handler (formSetAutoPing) where manipulating ping1/ping2 triggers a stack-based buffer overflow. The issue is exploitable remotely with a publicly disclosed exploit. CVSS-based metrics indicate HIGH...