CVE-2026-36822

HighCVSS 7.5

Published: 09/06/2026(UTC)Updated: 09/06/2026(UTC)Translated: 10/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.25%

49th percentile - higher than 49% of all known CVEs

Summary

A buffer overflow vulnerability was discovered in the macAddr parameter of the formDelStaState function in Tenda W20E version 15.11.0.6. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request.

Risk Assessment

This vulnerability may lead to service unavailability, impacting the organization's operational continuity and potentially causing financial losses.

Recommendation

It is recommended to update the device firmware to the latest version to mitigate this vulnerability and to monitor HTTP traffic for potential attacks.

Original NVD description (English source)

Shenzhen Tenda Technology Co., Ltd Tenda W20E v15.11.0.6 was discovered to contain a buffer overflow in the macAddr parameter of the formDelStaState function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request.