CVE-2026-36784
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk25th percentile - higher than 25% of all known CVEs
Summary
The Tenda O3 Wireless Router v1.0.0.5(4180) contains a stack overflow in the ip parameter of the fromNetToolGet function. An attacker can exploit this vulnerability by sending an HTTP request, leading to a Denial of Service (DoS).
Risk Assessment
A DoS attack can render the router inoperable, causing network outages for all connected devices.
Recommendation
Update the Tenda O3 router firmware to the latest version if a patch is available, or consider replacing the device with a non-vulnerable model.
Other vulnerabilities in Tenda O3
See all- CVE-2026-36783High
Tenda O3 Wireless Router v1.0.0.5(4180) has a stack overflow in the domain parameter of the fromNetToolGet function. This allows an attacker to cause a Denial of Service (DoS) via a crafted HTTP request.
- CVE-2026-36779High
Tenda O3 Wireless Router v1.0.0.5(4180) has multiple stack overflows in the fromVirtualSer function via parameters puVar2, puVar1, __s2, __s1_00, and puVar3. This allows an attacker to cause a Denial of Service (DoS) via a crafted HTTP request.
- CVE-2026-36778Medium
Tenda O3 router firmware v1.0.0.5(4180) has a stack overflow in the username parameter of the R7WebsSecurityHandler function. This allows an attacker to cause a Denial of Service (DoS) via a crafted HTTP request.
- CVE-2025-12213High
A stack-based buffer overflow vulnerability was detected in Tenda O3 in the SetValue/GetValue function of /goform/setVlanConfig, caused by manipulation of the lan argument. The attack can be launched remotely, and the exploit has been publicly disclosed.
- CVE-2025-12210High
A vulnerability was identified in Tenda O3 1.0.0.10(2478). Affected by this vulnerability is the function SetValue/GetValue of the file /goform/AdvSetLanip. The manipulation of the argument lanIp leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit is publicly available and might be used.
Original NVD description (English source)
Shenzhen Tenda Technology Co., Ltd Tenda O3 Wireless Router v1.0.0.5(4180) was discovered to contain a stack overflow in the ip parameter of the fromNetToolGet function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a HTTP request.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS