Unrated severityNVD Advisory· Published Feb 8, 2026· Updated Feb 23, 2026

Tenda TX3 SetIpMacBind buffer overflow

CVE-2026-2137

Description

A vulnerability has been found in Tenda TX3 up to 16.03.13.11_multi. This impacts an unknown function of the file /goform/SetIpMacBind. The manipulation of the argument list leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Tenda/TX3cpe-rescue2 versions
cpe:2.3:o:tenda:tx3_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:tenda:tx3_firmware:*:*:*:*:*:*:*:*range: 16.03.13.11_multi
- (no CPE)range: <=16.03.13.11_multi

Patches

Vulnerability mechanics

References

github.com/MRAdera/IoT-Vuls/blob/main/tenda/tx3/fromSetIpMacBind.mdmitreexploit
vuldb.commitrethird-party-advisory
github.com/MRAdera/IoT-Vuls/blob/main/tenda/tx3/fromSetIpMacBind.mdmitrerelated
vuldb.commitresignaturepermissions-required
vuldb.commitrevdb-entrytechnical-description
www.tenda.com.cnmitreproduct

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000