CVE-2026-36798

MEDIUM

Tenda G0 15.11.0.5 - Stack Overflow via formSetDebugCfgr Parameters

Title source: llm

Description

Shenzhen Tenda Technology Co., Ltd Tenda G0 v15.11.0.5 was discovered to contain multiple stack overflows in the formSetDebugCfgr function via the enable, level, and module parameters. These vulnerabilities allow attackers to cause a Denial of Service (DoS) via a crafted HTTP request.

References (1)

Core 1

Core References

https://github.com/xhh0124/SemVulLLM/tree/main/G0/formSetDebugCfg

View Writeup ZIP pw:eip

Scores

CVSS v3 6.5

EPSS 0.0030

EPSS Percentile 21.5%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-121

Status published

Published Jun 09, 2026

Tracked Since Jun 10, 2026