CVE-2026-36794

Shenzhen Tenda Technology Co., Ltd Tenda W3 Wireless Router v1.0.0.3(2204) was discovered to contain multiple stack overflows in the R7WebsSecurityHandler function via the username and password parameters. These vulnerabilities allow attackers to cause a Denial of Service (DoS) via a crafted HTTP request.

CVSS v3 7.5 HIGH

7.5^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://github.com/xhh0124/SemVulLLM/tree/main/W3/R7WebsSecurityHandler
https://github.com/xhh0124/SemVulLLM/tree/main/W3/R7WebsSecurityHandler

Configurations

No configuration.

History

No history.

Information

Published : 2026-06-09 19:17

Updated : 2026-07-23 09:10

NVD link : CVE-2026-36794

Mitre link : CVE-2026-36794

CVE.ORG link : CVE-2026-36794

JSON object : View

Products Affected

No product.

CWE

CWE-121

Stack-based Buffer Overflow

{"id": "CVE-2026-36794", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-36794", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-06-10T17:54:31.157174Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "affected": [{"source": "cve@mitre.org", "affectedData": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}]}], "published": "2026-06-09T19:17:44.917", "references": [{"url": "https://github.com/xhh0124/SemVulLLM/tree/main/W3/R7WebsSecurityHandler", "source": "cve@mitre.org"}, {"url": "https://github.com/xhh0124/SemVulLLM/tree/main/W3/R7WebsSecurityHandler", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-121"}]}], "descriptions": [{"lang": "en", "value": "Shenzhen Tenda Technology Co., Ltd Tenda W3 Wireless Router v1.0.0.3(2204) was discovered to contain multiple stack overflows in the R7WebsSecurityHandler function via the username and password parameters. These vulnerabilities allow attackers to cause a Denial of Service (DoS) via a crafted HTTP request."}, {"lang": "es", "value": "Shenzhen Tenda Technology Co., Ltd Tenda W3 Wireless Router v1.0.0.3(2204) se descubri\u00f3 que conten\u00eda m\u00faltiples desbordamientos de pila en la funci\u00f3n R7WebsSecurityHandler a trav\u00e9s de los par\u00e1metros de nombre de usuario y contrase\u00f1a. Estas vulnerabilidades permiten a los atacantes causar una denegaci\u00f3n de servicio (DoS) a trav\u00e9s de una solicitud HTTP manipulada."}], "lastModified": "2026-07-23T09:10:00.113", "sourceIdentifier": "cve@mitre.org"}