CVE-2026-36789

HIGH

Tenda AC1206 v15.03.06.23 - Stack Overflow via fromGstDhcpSetSer Username and Password Parameters

Title source: llm

Description

Shenzhen Tenda Technology Co., Ltd Tenda AC1206 v15.03.06.23 was discovered to contain multiple stack overflows in the fromGstDhcpSetSer function via the username and password parameters. These vulnerabilities allow attackers to cause a Denial of Service (DoS) via a crafted HTTP request.

References (1)

Core 1

Core References

https://github.com/xhh0124/SemVulLLM/tree/main/AC1206/fromGstDhcpSetSer

View Writeup ZIP pw:eip

Scores

CVSS v3 7.5

EPSS 0.0053

EPSS Percentile 40.3%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable yes

Technical Impact partial

Details

CWE

CWE-121

Status published

Published Jun 08, 2026

Tracked Since Jun 08, 2026