Unrated severityNVD Advisory· Published Jan 21, 2026· Updated Jan 22, 2026

CVE-2025-69763

Description

Tenda AX3 firmware v16.03.12.11 contains a stack overflow in formSetIptv via the vlanId parameter, which can cause memory corruption and enable remote code execution.

Affected products

Tenda/Ax9 Firmwarecpe-rescue
Tenda/AX3llm-fuzzy
Range: = firmware v16.03.12.11

Patches

Vulnerability mechanics

References

river-brow-763.notion.site/Tenda-AX3-Buffer-Overflow-in-formSetIptv-2c9a595a7aef8025a3c6c4b102d95dd4mitre
river-brow-763.notion.site/Tenda-AX3-Buffer-Overflow-in-formSetIptv-2c9a595a7aef8025a3c6c4b102d95dd4mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000