CVE-2025-71019

Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the wanSpeed parameter of the sub_65B5C function

High · published January 15, 2026

CVSS v3.1
7.5
EPSS
0%
Percentile
29.7
In the wild
Unconfirmed
What it is

⚡ A pesky stack overflow in Tenda AX-1806 could leave your network in a bind with just one crafted request! Think of this vulnerability like an overstuffed suitcase at an airport check-in; when it can't take any more, it just stops working. If an attacker sends a carefully crafted request, it overwhelms the system, causing a Denial of Service (DoS). If exploited, your Tenda AX-1806 could be brought to its knees, leaving your internet connection unavailable and your devices locked out. This isn't just an inconvenience—it's an absolute disruption for anything depending on your network!

Put simply

Think of this vulnerability like an overstuffed suitcase at an airport check-in; when it can't take any more, it just stops working. If an attacker sends a carefully crafted request, it overwhelms the system, causing a Denial of Service (DoS). The vulnerability lies in the wanSpeed parameter of the sub_65B5C function, which leads to a stack overflow when processing specific input, resulting in a crash of the device.

What to do

If exploited, your Tenda AX-1806 could be brought to its knees, leaving your internet connection unavailable and your devices locked out. This isn't just an inconvenience—it's an absolute disruption for anything depending on your network! To safeguard your network, update your Tenda AX-1806 to the latest firmware version immediately. If no patch is available, consider disabling remote management features or applying stricter access controls to reduce the risk of exploitation. You've got this! Stay proactive, follow these steps, and keep your network safe and sound! 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00370 · 29.7th percentile
Published
2026-01-15T00:00Z
EPSS history
Timeline
  • 15 JAN 00:00Z
    Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the wanSpeed parameter of the sub_65B5C function
    cvelistv5