CVE-2026-36794

Name of the Vulnerable Software and Affected Versions Tenda W3 Wireless Router version 1.0.0.3(2204)

Description Multiple stack overflows occur in the R7WebsSecurityHandler() function when processing the username and password parameters. This allows an attacker to trigger a Denial of Service (DoS), which is a condition where a system becomes unavailable to its intended users, by sending a specially crafted HTTP request.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the username and password parameters within the R7WebsSecurityHandler() function to minimize the risk of exploitation.