CVE-2026-36789

{"id": "CVE-2026-36789", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-36789", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-06-08T18:21:50.237230Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "affected": [{"source": "cve@mitre.org", "affectedData": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}]}], "published": "2026-06-08T15:16:45.660", "references": [{"url": "https://github.com/xhh0124/SemVulLLM/tree/main/AC1206/fromGstDhcpSetSer", "source": "cve@mitre.org"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-121"}]}], "descriptions": [{"lang": "en", "value": "Shenzhen Tenda Technology Co., Ltd Tenda AC1206 v15.03.06.23 was discovered to contain multiple stack overflows in the fromGstDhcpSetSer function via the username and password parameters. These vulnerabilities allow attackers to cause a Denial of Service (DoS) via a crafted HTTP request."}, {"lang": "es", "value": "Shenzhen Tenda Technology Co., Ltd Tenda AC1206 v15.03.06.23 se descubri\u00f3 que conten\u00eda m\u00faltiples desbordamientos de pila en la funci\u00f3n fromGstDhcpSetSer a trav\u00e9s de los par\u00e1metros de nombre de usuario y contrase\u00f1a. Estas vulnerabilidades permiten a los atacantes causar una denegaci\u00f3n de servicio (DoS) mediante una solicitud HTTP manipulada."}], "lastModified": "2026-07-23T07:10:00.113", "sourceIdentifier": "cve@mitre.org"}