CVE-2026-36794

7.5 highEPSS 0.4%

High (7.5). EPSS 0.4% chance of exploitation in the next 30 days.

Shenzhen Tenda Technology Co., Ltd Tenda W3 Wireless Router v1.0.0.3(2204) was discovered to contain multiple stack overflows in the R7WebsSecurityHandler function via the username and password parameters. These vulnerabilities allow attackers to cause a Denial of Service (DoS) via a crafted HTTP request.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 33% of CVEs (scores of 2026-10-31)
CWE: CWE-121
Published: 2026-06-09
Modified: 2026-07-23
Record from: the NVD, synced 2026-10-19

References

https://github.com/xhh0124/SemVulLLM/tree/main/W3/R7WebsSecurityHandler
https://github.com/xhh0124/SemVulLLM/tree/main/W3/R7WebsSecurityHandler

Check your stack JSON