HIGH
Tenda i3 wifiSSIDset formwrlSSIDset stack-based overflow
Published Mar 12, 2026
8.7
HIGHCVSS 4.0
EPSS 1.01%
Description
A vulnerability has been found in Tenda i3 1.0.0.6(2204). Affected by this vulnerability is the function formwrlSSIDset of the file /goform/wifiSSIDset. The manipulation of the argument index/GO leads to stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.
Affected products
-
- Version 1.0.0.6(2204)StatusaffectedConstraints-
- Version
AND
- 1.0.0.6\(2204\)
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (3)
References (8)
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-11499 Advisory
- https://github.com/Svigo-o/Tenda_vul/tree/main/tenda-i3-formwrlSSIDset-go-buffer-overflow exploitThird Party Advisory
- https://github.com/Svigo-o/Tenda_vul/tree/main/tenda-i3-formwrlSSIDset-index-buffer-overflow relatedExploitThird Party Advisory
- https://vuldb.com/?ctiid.350406 signaturepermissions-requiredPermissions RequiredVDB Entry
- https://vuldb.com/?id.350406 vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
- https://vuldb.com/?submit.768996 third-party-advisoryThird Party AdvisoryVDB Entry
- https://vuldb.com/?submit.768997 third-party-advisoryThird Party AdvisoryVDB Entry
- https://www.tenda.com.cn/ product
| Link | Providers | Tags |
|---|---|---|
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-11499 | Advisory | |
| https://github.com/Svigo-o/Tenda_vul/tree/main/tenda-i3-formwrlSSIDset-go-buffer-overflow | exploitThird Party Advisory | |
| https://github.com/Svigo-o/Tenda_vul/tree/main/tenda-i3-formwrlSSIDset-index-buffer-overflow | relatedExploitThird Party Advisory | |
| https://vuldb.com/?ctiid.350406 | signaturepermissions-requiredPermissions RequiredVDB Entry | |
| https://vuldb.com/?id.350406 | vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry | |
| https://vuldb.com/?submit.768996 | third-party-advisoryThird Party AdvisoryVDB Entry | |
| https://vuldb.com/?submit.768997 | third-party-advisoryThird Party AdvisoryVDB Entry | |
| https://www.tenda.com.cn/ | product |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner VulDB
Published Mar 12, 2026
Updated Mar 12, 2026
Reserved Mar 11, 2026
Link CVE-2026-3971
CISA Vulnrichment
Updated Mar 12, 2026
ENISA EUVD
EUVD-2026-11499 Assigner VulDB
Published Mar 12, 2026
Updated Mar 12, 2026
Exploited since n/a
Link EUVD-2026-11499