CVE-2026-36820
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk23th percentile - higher than 23% of all known CVEs
Summary
A buffer overflow vulnerability was discovered in the webAuthWhiteUserInfo parameter of the formAddWebAuthWhiteUser function in Tenda W20E firmware version 15.11.0.6. This flaw allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request.
Risk Assessment
An attacker can remotely crash the device, leading to network disruption and loss of service availability for users.
Recommendation
Immediately update the Tenda W20E firmware to the latest version if a patch is available, or apply temporary network mitigations such as HTTP traffic filtering.
Other vulnerabilities in Tenda W20E
See all- CVE-2026-67967Critical
A buffer overflow vulnerability in Tenda W20E V16.01.0.6(2782) allows an attacker to execute arbitrary code. This is an incomplete fix for CVE-2025-44867 and CVE-2026-36819.
- CVE-2026-67966Critical
The /goform/telnet endpoint in Tenda W20E V16.01.0.6(2782) allows unauthenticated remote attackers to activate the Telnet daemon and obtain root shell access.
- CVE-2026-67965Critical
An issue in Tenda W20E v.16.01.0.6(2782) allows a remote attacker to execute arbitrary code via the url_need_login function.
- CVE-2026-19824High
A stack-based buffer overflow vulnerability was identified in Tenda W20E 15.11.0.6(1068_1546_841)_CN_TDC in the ipMacBindListStore function of /goform/addIpMacBind. Manipulating the IPMacBindRule argument can lead to buffer overflow. The attack can be executed remotely, and the exploit is publicly available.
- CVE-2026-19823High
A stack-based buffer overflow vulnerability was discovered in Tenda W20E 15.11.0.6(1068_1546_841)_CN_TDC in the formQOSRuleDel function of /goform/delQos. Manipulating the qosIndex argument results in buffer overflow. The attack can be executed remotely, and the exploit is publicly available.
- CVE-2026-19822High
A vulnerability was identified in Tenda W20E 15.11.0.6(1068_1546_841)_CN_TDC. The function lstAdd of the file /goform/editQos in the QoS Edit component is affected. Manipulation of the argument qosListConnecttedNum leads to stack-based buffer overflow. The attack may be launched remotely, and the exploit is publicly available.
- CVE-2026-36823High
A buffer overflow vulnerability was discovered in the webAuthUserInfo parameter of the formAddWebAuthUser function in Tenda W20E router version 15.11.0.6. Attackers can cause a Denial of Service (DoS) via a crafted HTTP request.
- CVE-2026-36822High
A buffer overflow vulnerability was discovered in the macAddr parameter of the formDelStaState function in Tenda W20E router version 15.11.0.6. Attackers can cause a Denial of Service (DoS) via a crafted HTTP request.
- CVE-2026-36821High
A buffer overflow vulnerability was discovered in the picCropName parameter of the formCropAndSetWewifiPic function in Tenda W20E router version 15.11.0.6. Attackers can cause a Denial of Service (DoS) via a crafted HTTP request.
- CVE-2026-36819High
A buffer overflow vulnerability was discovered in the bindMACAddr parameter of the fromSetDhcpRules function in Tenda W20E router version 15.11.0.6. Attackers can cause a Denial of Service (DoS) via a crafted HTTP request.
Original NVD description (English source)
Shenzhen Tenda Technology Co., Ltd Tenda W20E v15.11.0.6 was discovered to contain a buffer overflow in the webAuthWhiteUserInfo parameter of the formAddWebAuthWhiteUser function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request.