CVE-2026-36792
Description
A stack overflow in Tenda W3 Wireless Router v1.0.0.3(2204) allows DoS via a crafted HTTP request.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
A stack overflow in Tenda W3 Wireless Router v1.0.0.3(2204) allows DoS via a crafted HTTP request.
Vulnerability
A stack overflow vulnerability exists in the wl_radio parameter of the formWifiRadioSet function within the websFormDefine handler in Shenzhen Tenda Technology Co., Ltd Tenda W3 Wireless Router v1.0.0.3(2204) [1]. This vulnerability is reachable via the formWifiRadioSet CGI endpoint [1].
Exploitation
An attacker can exploit this vulnerability by sending a crafted HTTP request to the formWifiRadioSet CGI endpoint, setting the wl_radio parameter to a large value such as 0x7fffffff [1]. This requires network access to the device.
Impact
Successful exploitation of this vulnerability allows an attacker to cause a Denial of Service (DoS) on the affected device, potentially leading to a crash or reboot [1].
Mitigation
No specific mitigation or patched version information is available in the provided references. The vulnerability affects Tenda W3 Wireless Router v1.0.0.3(2204) [1].
AI Insight generated on Jun 9, 2026. Synthesized from this CVE's description and the cited reference URLs; citations are validated against the source bundle.
Affected products
1- Range: 1.0.0.3(2204)
Patches
0No patches discovered yet.
Vulnerability mechanics
No source-code context for this CVE — mechanics is only generated when we can read the actual fix diff. Without that, the four sections (root cause, attack vector, affected code, fix) would be speculation rather than analysis.
References
1News mentions
0No linked articles in our index yet.