CVE-2026-36773
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk8th percentile - higher than 8% of all known CVEs
Summary
The Tenda W3 router version v1.0.0.3(2204) contains a stack overflow vulnerability in the Go parameter of the ask_to_reboot function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.
Risk Assessment
The risk involves the possibility of disrupting router operation, which can lead to network unavailability for users.
Recommendation
It is recommended to contact the manufacturer for a firmware update that eliminates this vulnerability.
Other vulnerabilities in Tenda W3
See all- CVE-2026-36794High
Tenda W3 router v1.0.0.3(2204) has multiple stack overflows in R7WebsSecurityHandler via username and password parameters, allowing attackers to cause DoS via crafted HTTP request.
- CVE-2026-36793High
Tenda W3 router v1.0.0.3(2204) has multiple stack overflows in formwrlSSIDset via mit_ssid and mis_ssid_index parameters, allowing attackers to cause DoS via crafted HTTP request.
- CVE-2026-36792High
Tenda W3 router v1.0.0.3(2204) has a stack overflow in the wl_radio parameter of formWifiRadioSet, allowing attackers to cause DoS via crafted HTTP request.
- CVE-2026-36772Medium
The Tenda W3 router version v1.0.0.3(2204) contains a stack overflow vulnerability in the wl_radio parameter of the formwrlSSIDget function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.
- CVE-2026-36771High
The Tenda W3 Wireless Router v1.0.0.3(2204) contains a stack overflow in the wl_radio parameter of the formwrlSSIDset function. An attacker can exploit this vulnerability by sending crafted input, leading to a Denial of Service (DoS).
Original NVD description (English source)
Shenzhen Tenda Technology Co., Ltd Tenda W3 Wireless Router v1.0.0.3(2204) was discovered to contain a stack overflow in the Go parameter of the ask_to_reboot function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.