CVE-2026-36792: Shenzhen Tenda Technology Co

Synopsis

A stack-based buffer overflow exists in the formWifiRadioSet function of the Tenda W3 Wireless Router firmware v1.0.0.3(2204), specifically in the wl_radio parameter. The vulnerability is reachable over the network with no authentication required and no user interaction needed. Successful exploitation crashes the affected service, causing a denial of service. No fix version has been published; HarborGuard tracks this advisory for patch availability.

HarborGuard Coverage

Exploit Conditions

• Network reachabilityRequired

  The vulnerable HTTP endpoint is exposed over the network, so an attacker must be able to reach the device's web interface to send a crafted request.

• AuthenticationNot required

  No credentials are needed; the attacker can send a malicious request as an unauthenticated caller.

• Victim interactionNot required

  The exploit requires no action from any user or administrator on the target device.

• Attack complexityDetail

  Attack complexity is low, meaning the exploit is reliable and requires no special conditions, race timing, or environmental prerequisites.

Blast Radius

• The affected router process crashes, taking down wireless radio configuration handling and disrupting network connectivity for all devices on the affected segment.
• No confidentiality impact is associated with this vulnerability; stored credentials and configuration data are not exposed by the overflow.
• No integrity impact is present; the attacker cannot modify persisted settings or routing tables through this exploit path.