ByteOS Network

Vulnerability Details :

CVE-2026-36772

Assigner-mitre

Assigner Org ID-8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At-09 Jun, 2026 | 00:00

Updated At-10 Jun, 2026 | 17:29

Shenzhen Tenda Technology Co., Ltd Tenda W3 Wireless Router v1.0.0.3(2204) was discovered to contain a stack overflow in the wl_radio parameter of the formwrlSSIDget function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:mitre

Assigner Org ID:8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At:09 Jun, 2026 | 00:00

Updated At:10 Jun, 2026 | 17:29

▼CVE Numbering Authority (CNA)

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
https://github.com/xhh0124/SemVulLLM/tree/main/W3/formwrlSSIDget	N/A

Hyperlink: https://github.com/xhh0124/SemVulLLM/tree/main/W3/formwrlSSIDget

Resource: N/A

▼Authorized Data Publishers (ADP)

CISA ADP Vulnrichment

Problem Types

Type	CWE ID	Description
CWE	CWE-121	CWE-121 Stack-based Buffer Overflow

Type: CWE

CWE ID: CWE-121

Description: CWE-121 Stack-based Buffer Overflow

Metrics

Version	Base score	Base severity	Vector
3.1	6.5	MEDIUM	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Version: 3.1

Base score: 6.5

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Metrics Other Info

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:cve@mitre.org

Published At:09 Jun, 2026 | 19:17

Updated At:10 Jun, 2026 | 18:16

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	3.1	6.5	MEDIUM	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Type: Secondary

Version: 3.1

Base score: 6.5

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses

CWE ID	Type	Source
CWE-121	Secondary	134c704f-9b21-4f2e-91b3-4a467353bcc0

CWE ID: CWE-121

Type: Secondary

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

References

Hyperlink	Source	Resource
https://github.com/xhh0124/SemVulLLM/tree/main/W3/formwrlSSIDget	cve@mitre.org	N/A

Hyperlink: https://github.com/xhh0124/SemVulLLM/tree/main/W3/formwrlSSIDget

Source: cve@mitre.org

Resource: N/A

Similar CVEs

66Records found

CVE-2024-28547

Matching Score-4

Assigner-MITRE Corporation

View Details

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-6.5||MEDIUM

EPSS-0.50% / 38.62%

7 Day CHG~0.00%

Published-18 Mar, 2024 | 00:00

Updated-13 Mar, 2025 | 19:47

Tenda AC18 V15.03.05.05 has a stack overflow vulnerability in the firewallEn parameter of formSetFirewallCfg function.

Vendor-n/a Tenda Technology Co., Ltd.

Product-ac18 ac18_firmware n/a ac18_firmware

CWE ID-CWE-121

Stack-based Buffer Overflow

CVE-2024-27568

Matching Score-4

Assigner-MITRE Corporation

View Details

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-6.5||MEDIUM

EPSS-0.50% / 38.99%

7 Day CHG~0.00%

Published-01 Mar, 2024 | 00:00

Updated-30 Apr, 2025 | 11:25

LBT T300-T390 v2.2.1.8 were discovered to contain a stack overflow via the apn_name_3g parameter in the setupEC20Apn function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

Vendor-libtor n/a szlbt

Product-lbt-t300-t390_firmware lbt-t300-t390 n/a lbt-t300-t390_firmware

CWE ID-CWE-121

Stack-based Buffer Overflow

CVE-2026-36777

Matching Score-4

Assigner-MITRE Corporation

View Details

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-6.5||MEDIUM

EPSS-0.22% / 11.93%

7 Day CHG~0.00%

Published-09 Jun, 2026 | 00:00

Updated-10 Jun, 2026 | 18:16

Shenzhen Tenda Technology Co., Ltd Tenda W3 Wireless Router v1.0.0.3(2204) was discovered to contain a stack overflow in the param_1 parameter of the formSetCfm function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request.

Vendor-n/a

Product-n/a

CWE ID-CWE-121

Stack-based Buffer Overflow

CVE-2024-42984

Matching Score-4

Assigner-MITRE Corporation

View Details

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-6.5||MEDIUM

EPSS-0.56% / 42.02%

7 Day CHG~0.00%

Published-15 Aug, 2024 | 00:00

Updated-15 Aug, 2024 | 18:35

Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the fromP2pListFilter function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

Vendor-n/a Tenda Technology Co., Ltd.

Product-n/a fh1206_firmware

CWE ID-CWE-121

Stack-based Buffer Overflow

CVE-2024-42953

Matching Score-4

Assigner-MITRE Corporation

View Details

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-6.5||MEDIUM

EPSS-0.56% / 42.06%

7 Day CHG~0.00%

Published-15 Aug, 2024 | 00:00

Updated-16 Aug, 2024 | 18:15

Tenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the PPW parameter in the fromWizardHandle function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

Vendor-n/a Tenda Technology Co., Ltd.

Product-fh1201_firmware fh1201 n/a fh1201_firmware

CWE ID-CWE-121

Stack-based Buffer Overflow

CWE ID-CWE-787

Out-of-bounds Write

CVE-2024-42946

Matching Score-4

Assigner-MITRE Corporation

View Details

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-6.5||MEDIUM

EPSS-0.69% / 47.86%

7 Day CHG~0.00%

Published-15 Aug, 2024 | 00:00

Updated-16 Aug, 2024 | 17:35

Tenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the page parameter in the fromVirtualSer function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

Vendor-n/a Tenda Technology Co., Ltd.

Product-fh1201_firmware fh1201 n/a fh1201_firmware

CWE ID-CWE-121

Stack-based Buffer Overflow

CWE ID-CWE-787

Out-of-bounds Write

CVE-2024-42983

Matching Score-4

Assigner-MITRE Corporation

View Details

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-6.5||MEDIUM

EPSS-0.55% / 41.78%

7 Day CHG~0.00%

Published-15 Aug, 2024 | 00:00

Updated-15 Aug, 2024 | 18:35

Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the pptpPPW parameter in the fromAdvSetWan function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

Vendor-n/a Tenda Technology Co., Ltd.

Product-n/a fh1206_firmware

CWE ID-CWE-121

Stack-based Buffer Overflow

CVE-2024-41460

Matching Score-4

Assigner-MITRE Corporation

View Details

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-6.5||MEDIUM

EPSS-0.57% / 42.79%

7 Day CHG~0.00%

Published-24 Jul, 2024 | 00:00

Updated-02 Aug, 2024 | 04:46

Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the entrys parameter at ip/goform/RouteStatic.

Vendor-n/a Tenda Technology Co., Ltd.

Product-fh1201_firmware fh1201 n/a fh1201_firmware

CWE ID-CWE-121

Stack-based Buffer Overflow

CWE ID-CWE-787

Out-of-bounds Write

CVE-2025-29118

Matching Score-4

Assigner-MITRE Corporation

View Details

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-6.5||MEDIUM

EPSS-0.33% / 24.46%

7 Day CHG+0.02%

Published-19 Mar, 2025 | 00:00

Updated-01 Apr, 2025 | 20:36

Tenda AC8 V16.03.34.06 was discovered to contain a stack overflow via the src parameter in the function sub_47D878.

Vendor-n/a Tenda Technology Co., Ltd.

Product-ac8 ac8_firmware n/a

CWE ID-CWE-121

Stack-based Buffer Overflow

CVE-2024-30632

Matching Score-4

Assigner-MITRE Corporation

View Details

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-6.5||MEDIUM

EPSS-0.53% / 40.48%

7 Day CHG~0.00%

Published-29 Mar, 2024 | 00:00

Updated-13 Mar, 2025 | 21:26

Tenda FH1205 v2.0.0.7(775) has a stack overflow vulnerability in the security_5g parameter from formWifiBasicSet function.

Vendor-n/a Tenda Technology Co., Ltd.

Product-fh1205_firmware fh1205 n/a fh1205_firmware

CWE ID-CWE-121

Stack-based Buffer Overflow

CVE-2024-28447

Matching Score-4

Assigner-MITRE Corporation

View Details

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-6.5||MEDIUM

EPSS-0.52% / 39.91%

7 Day CHG~0.00%

Published-19 Mar, 2024 | 00:00

Updated-21 Aug, 2025 | 14:32

Shenzhen Libituo Technology Co., Ltd LBT-T300-mini1 v1.2.9 was discovered to contain a buffer overflow via lan_ipaddr parameters at /apply.cgi.

Vendor-szlbt n/a szlbt

Product-lbt-t300-mini1 lbt-t300-mini1_firmware n/a lbt-t300-mini_firmware

CWE ID-CWE-121

Stack-based Buffer Overflow

CVE-2024-27569

Matching Score-4

Assigner-MITRE Corporation

View Details

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-6.5||MEDIUM

EPSS-0.50% / 38.99%

7 Day CHG~0.00%

Published-01 Mar, 2024 | 00:00

Updated-30 Apr, 2025 | 11:25

LBT T300-T390 v2.2.1.8 were discovered to contain a stack overflow via the ApCliSsid parameter in the init_nvram function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

Vendor-libtor n/a szlbt

Product-lbt-t300-t390_firmware lbt-t300-t390 n/a lbt-t300-t390_firmware

CWE ID-CWE-121

Stack-based Buffer Overflow

CVE-2025-65804

Matching Score-4

Assigner-MITRE Corporation

View Details

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-6.5||MEDIUM

EPSS-0.49% / 38.34%

7 Day CHG~0.00%

Published-08 Dec, 2025 | 00:00

Updated-11 Dec, 2025 | 00:03

Tenda AX3 v16.03.12.11 contains a stack overflow in formSetIptv via the iptvType parameter, which can cause memory corruption and enable remote code execution (RCE).

Vendor-n/a Tenda Technology Co., Ltd.

Product-ax3_firmware ax3 n/a

CWE ID-CWE-121

Stack-based Buffer Overflow

CVE-2025-20794

Matching Score-4

Assigner-MediaTek, Inc.

View Details

Matching Score-4

Assigner-MediaTek, Inc.

CVSS Score-6.5||MEDIUM

EPSS-0.25% / 15.77%

7 Day CHG~0.00%

Published-06 Jan, 2026 | 01:46

Updated-30 Mar, 2026 | 13:03

In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01689259 / MOLY01586470; Issue ID: MSV-4847.

Vendor-MediaTek Inc.