CVE-2026-36803

HighCVSS 7.5

Published: 09/06/2026(UTC)Updated: 23/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.31%

23th percentile - higher than 23% of all known CVEs

Summary

A buffer overflow vulnerability was discovered in the Tenda PW201A router version 1.0.5 in the page parameter of the qossetting function. Attackers can cause a Denial of Service (DoS) via a crafted HTTP request.

Risk Assessment

The risk is the potential remote shutdown of the device, which can disrupt network operations and impact service availability.

Recommendation

It is recommended to immediately update the Tenda PW201A router firmware to the latest version if a patch is available from the vendor.

Other vulnerabilities in Tenda PW201A

CVE-2026-36802High
A buffer overflow vulnerability was discovered in the Tenda PW201A router version 1.0.5 in the page parameter of the SafeMacFilter function. Attackers can cause a Denial of Service (DoS) via a crafted HTTP request.

Original NVD description (English source)

Shenzhen Tenda Technology Co., Ltd Tenda PW201A v1.0.5 was discovered to contain a buffer overflow in the page parameter of the qossetting function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request.