Unrated severityNVD Advisory· Published Jan 21, 2026· Updated Jan 22, 2026

CVE-2025-69766

Description

Tenda AX3 firmware v16.03.12.11 contains a stack-based buffer overflow in the formGetIptv function due to improper handling of the citytag stack buffer, which may result in memory corruption and remote code execution.

Affected products

Tenda/Ax9 Firmwarecpe-rescue
Tenda/AX3llm-fuzzy
Range: = 16.03.12.11

Patches

Vulnerability mechanics

References

river-brow-763.notion.site/Tenda-AX3-Buffer-Overflow-in-formGetIptv-2c9a595a7aef8043a091e6722b8e255amitre
river-brow-763.notion.site/Tenda-AX3-Buffer-Overflow-in-formGetIptv-2c9a595a7aef8043a091e6722b8e255amitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000