Buffer Overflow Vulnerability in Tenda G0 by Shenzhen Tenda Technology
CVE-2026-36799

7.5HIGH

Key Information:

Vendor

Shenzhen Tenda Technology Co., Ltd

Status
Tenda G0
Vendor
CVE Published:
9 June 2026

What is CVE-2026-36799?

A buffer overflow vulnerability has been identified in the portalAuth parameter of the formPortalAuth function in Tenda G0 v15.11.0.5. This flaw could be exploited by attackers through specially crafted HTTP requests, potentially leading to a Denial of Service (DoS) condition and impacting the availability of the device. It is crucial for users to take immediate action to mitigate this risk.

References

https://github.com/xhh0124/SemVulLLM/tree/main/G0/formPor...

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.