CVE-2025-71026

Tenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow in the wanSpeed2 parameter of the fromAdvSetMacMtuWan function

High · published January 13, 2026

CVSS v3.1
7.5
EPSS
0%
Percentile
38.3
In the wild
Unconfirmed
What it is

⚡ A sneaky stack overflow is lurking in Tenda AX-3 routers! One crafted request can take down your device, leaving you offline and frustrated. 😱 Think of this like a restaurant that's overbooked: if too many people try to sit down at once, the whole operation comes to a grinding halt. That’s exactly what happens here when the wanSpeed2 parameter gets overloaded, causing a Denial of Service! With this vulnerability, an attacker could send a specially crafted request that forces the router to crash, effectively shutting down your internet connection. It’s like having a power outage just when you need to get online – absolutely devastating! This could disrupt your work, gaming sessions, or streaming plans.

Put simply

Think of this like a restaurant that's overbooked: if too many people try to sit down at once, the whole operation comes to a grinding halt. That’s exactly what happens here when the wanSpeed2 parameter gets overloaded, causing a Denial of Service! The stack overflow occurs in the wanSpeed2 parameter of the fromAdvSetMacMtuWan function, allowing attackers to exploit this flaw to crash the device, leading to a Denial of Service condition.

What to do

With this vulnerability, an attacker could send a specially crafted request that forces the router to crash, effectively shutting down your internet connection. It’s like having a power outage just when you need to get online – absolutely devastating! This could disrupt your work, gaming sessions, or streaming plans. To protect yourself, update your Tenda AX-3 to the latest firmware version as soon as it's available. Also, consider implementing firewall rules to limit unauthorized access and monitoring your network traffic for unusual activities. You've got this! Follow these steps, and you’ll keep your network safe and sound. 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00456 · 38.3th percentile
Published
2026-01-13T00:00Z
EPSS history
Timeline
  • 13 JAN 00:00Z
    Tenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow in the wanSpeed2 parameter of the fromAdvSetMacMtuWan function
    cvelistv5