CVE-2025-71020

Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the security parameter of the sub_4C408 function

High · published January 16, 2026

CVSS v3.1
7.5
EPSS
0%
Percentile
29.5
In the wild
Unconfirmed
What it is

⚡ A stack overflow lurking in Tenda AX-1806 can bring your network to its knees with a single, crafty request! Think of your network like a busy restaurant kitchen. If an order comes in with too many items, it clogs up the workflow and halts everything — that’s what this overflow does to your router’s processing! If exploited, this vulnerability could lead to a Denial of Service (DoS), meaning legitimate users could be completely locked out from accessing your network. Imagine your entire team unable to work because the router is overwhelmed!

Put simply

Think of your network like a busy restaurant kitchen. If an order comes in with too many items, it clogs up the workflow and halts everything — that’s what this overflow does to your router’s processing! This vulnerability involves a stack overflow in the security parameter of the sub_4C408 function, allowing attackers to crash the system with specially crafted requests, leading to service disruptions.

What to do

If exploited, this vulnerability could lead to a Denial of Service (DoS), meaning legitimate users could be completely locked out from accessing your network. Imagine your entire team unable to work because the router is overwhelmed! To safeguard your network, update the Tenda AX-1806 to the latest firmware version as soon as it’s available. Additionally, monitor traffic for any unusual patterns that might indicate an attempted exploit. 🔒 You've got this! By staying proactive, you can keep your network running smoothly and securely! 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00370 · 29.5th percentile
Published
2026-01-16T00:00Z
EPSS history
Timeline
  • 16 JAN 00:00Z
    Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the security parameter of the sub_4C408 function
    cvelistv5