CVE-2026-1329CWE-119CWE-121

Tenda AX1803 WifiGuestSet fromGetWifiGuestBasic stack-based overflow

High · published January 22, 2026

CVSS v4.0
8.7
EPSS
1%
Percentile
67.9
In the wild
Unconfirmed
What it is

⚡ A remote attacker can easily trigger a stack-based buffer overflow on the Tenda AX1803 with a simple tweak to the guest Wi-Fi settings! 🔥 Think of this vulnerability like a restaurant where a customer can sneakily manipulate their order to overflow the kitchen's capacity, causing chaos in meal preparation. Just like that overwhelmed kitchen, the affected system can't handle the extra information, leading to major disruptions. If exploited, this vulnerability lets an attacker execute arbitrary code on the device remotely, potentially giving them control over your router. This could lead to sensitive data breaches, unauthorized network access, and a complete compromise of your home network security!

Put simply

Think of this vulnerability like a restaurant where a customer can sneakily manipulate their order to overflow the kitchen's capacity, causing chaos in meal preparation. Just like that overwhelmed kitchen, the affected system can't handle the extra information, leading to major disruptions. This flaw in the Tenda AX1803 arises from improper handling of arguments in the function `fromGetWifiGuestBasic`, leading to a stack-based buffer overflow that attackers can manipulate remotely.

What to do

If exploited, this vulnerability lets an attacker execute arbitrary code on the device remotely, potentially giving them control over your router. This could lead to sensitive data breaches, unauthorized network access, and a complete compromise of your home network security! To protect your network, update your Tenda AX1803 to version 1.0.0.2 or later immediately. Additionally, limit remote access to your device and regularly monitor your router's settings for unauthorized changes. You’ve got this! Stay vigilant and follow these steps to keep your network safe! 🛡️

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
EPSS
0.01199 · 67.9th percentile
Weaknesses
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer; CWE-121 · Stack-based Buffer Overflow
Published
2026-01-22T14:32Z
EPSS history
Timeline
  • 22 JAN 14:32Z
    Tenda AX1803 WifiGuestSet fromGetWifiGuestBasic stack-based overflow
    cvelistv5