Stack-based Buffer Overflow in Tenda RX3 Router
CVE-2026-2181

8.7HIGH

Key Information:

Vendor: Tenda
Status: Rx3
Vendor: CVE Published:; 8 February 2026

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-2181?

A security vulnerability has been identified in the Tenda RX3 router, specifically in the '/goform/openSchedWifi' file. This flaw allows for a stack-based buffer overflow when the arguments 'schedStartTime' and 'schedEndTime' are manipulated. The issue can be exploited remotely, posing significant risks to the device. With the exploit publicly available, it is crucial for users to ensure their devices are secure and up to date to prevent potential attacks.

Affected Version(s)

RX3 16.03.13.11

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-2181 - Proof of Concept