CVE-2026-36805

HIGH

Tenda G0 v15.11.0.5 - Multiple Buffer Overflow via Saveqqlist Function

Title source: llm

Description

Shenzhen Tenda Technology Co., Ltd Tenda G0 v15.11.0.5 was discovered to contain multiple buffer overflows in the Saveqqlist function via the qqStr and markStr parameters. These vulnerabilities allow attackers to cause a Denial of Service (DoS) via a crafted HTTP request.

References (1)

Core 1

Core References

https://github.com/xhh0124/SemVulLLM/tree/main/PW201A/L7IM

View Writeup ZIP pw:eip

Scores

CVSS v3 7.5

EPSS 0.0031

EPSS Percentile 22.4%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable yes

Technical Impact partial

Details

CWE

CWE-121

Status published

Published Jun 09, 2026

Tracked Since Jun 10, 2026