CVE-2026-3811

Name of the Vulnerable Software and Affected Versions Tenda FH1202 version 1.2.0.14(408)

Description A stack-based buffer overflow exists in the fromP2pListFilter() function within the /goform/P2pListFilter file. This issue occurs when the page argument is manipulated, allowing a remote attacker to execute arbitrary code or cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the /goform/P2pListFilter endpoint to minimize the risk of exploitation.