CVE-2026-36798
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk37th percentile - higher than 37% of all known CVEs
Summary
Multiple stack overflows were discovered in the formSetDebugCfgr function in Tenda G0 version 15.11.0.5, via the enable, level, and module parameters. These vulnerabilities allow attackers to cause a Denial of Service (DoS) via a crafted HTTP request.
Risk Assessment
The organization may be vulnerable to DoS attacks, which could lead to service unavailability and disruption of operations.
Recommendation
It is recommended to update the device firmware to the latest version to mitigate these vulnerabilities and to monitor network traffic for potential attacks.
Original NVD description (English source)
Shenzhen Tenda Technology Co., Ltd Tenda G0 v15.11.0.5 was discovered to contain multiple stack overflows in the formSetDebugCfgr function via the enable, level, and module parameters. These vulnerabilities allow attackers to cause a Denial of Service (DoS) via a crafted HTTP request.