CVE-2026-36779
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk32th percentile - higher than 32% of all known CVEs
Summary
Tenda O3 Wireless Router v1.0.0.5(4180) has multiple stack overflows in the fromVirtualSer function via parameters puVar2, puVar1, __s2, __s1_00, and puVar3. This allows an attacker to cause a Denial of Service (DoS) via a crafted HTTP request.
Risk Assessment
Multiple stack overflows can crash the router, causing network outages and loss of connectivity.
Recommendation
Update the Tenda O3 router firmware to a patched version. If unavailable, restrict access to the management interface.
Other vulnerabilities in Tenda O3
See all- CVE-2026-36784High
The Tenda O3 Wireless Router v1.0.0.5(4180) contains a stack overflow in the ip parameter of the fromNetToolGet function. An attacker can exploit this vulnerability by sending an HTTP request, leading to a Denial of Service (DoS).
- CVE-2026-36783High
Tenda O3 Wireless Router v1.0.0.5(4180) has a stack overflow in the domain parameter of the fromNetToolGet function. This allows an attacker to cause a Denial of Service (DoS) via a crafted HTTP request.
- CVE-2026-36778Medium
Tenda O3 router firmware v1.0.0.5(4180) has a stack overflow in the username parameter of the R7WebsSecurityHandler function. This allows an attacker to cause a Denial of Service (DoS) via a crafted HTTP request.
Original NVD description (English source)
Shenzhen Tenda Technology Co., Ltd Tenda O3 Wireless Router v1.0.0.5(4180) was discovered to contain multiple stack overflows in the fromVirtualSer function via the puVar2, puVar1, __s2, __s1_00, and puVar3 parameters. These vulnerabilities allow attackers to cause a Denial of Service (DoS) via a crafted HTTP request.