CVE-2026-36783
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk32th percentile - higher than 32% of all known CVEs
Summary
Tenda O3 Wireless Router v1.0.0.5(4180) has a stack overflow in the domain parameter of the fromNetToolGet function. This allows an attacker to cause a Denial of Service (DoS) via a crafted HTTP request.
Risk Assessment
A DoS attack can crash the router, disrupting the local network and internet access for all connected devices.
Recommendation
Immediately update the Tenda O3 router firmware to the latest version if a patch is available. Otherwise, restrict administrative access to trusted networks only.
Other vulnerabilities in Tenda O3
See all- CVE-2026-36784High
The Tenda O3 Wireless Router v1.0.0.5(4180) contains a stack overflow in the ip parameter of the fromNetToolGet function. An attacker can exploit this vulnerability by sending an HTTP request, leading to a Denial of Service (DoS).
- CVE-2026-36779High
Tenda O3 Wireless Router v1.0.0.5(4180) has multiple stack overflows in the fromVirtualSer function via parameters puVar2, puVar1, __s2, __s1_00, and puVar3. This allows an attacker to cause a Denial of Service (DoS) via a crafted HTTP request.
- CVE-2026-36778Medium
Tenda O3 router firmware v1.0.0.5(4180) has a stack overflow in the username parameter of the R7WebsSecurityHandler function. This allows an attacker to cause a Denial of Service (DoS) via a crafted HTTP request.
Original NVD description (English source)
Shenzhen Tenda Technology Co., Ltd Tenda O3 Wireless Router v1.0.0.5(4180) was discovered to contain a stack overflow in the domain parameter of the fromNetToolGet function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request.