CVE-2026-36799

Name of the Vulnerable Software and Affected Versions Tenda G0 version 15.11.0.5

Description A buffer overflow exists in the formPortalAuth() function. An attacker can trigger a Denial of Service (DoS) by sending a crafted HTTP request containing a malicious portalAuth parameter. A buffer overflow occurs when a program writes more data to a block of memory, or buffer, than it is allowed to hold, potentially corrupting adjacent memory.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the portalAuth parameter within the formPortalAuth() function to minimize the risk of exploitation.