CVE-2026-2180CWE-119CWE-121

Tenda RX3 fast_setting_wifi_set stack-based overflow

High · published February 8, 2026

CVSS v4.0
8.7
EPSS
1%
Percentile
50.0
In the wild
Unconfirmed
What it is

🚨 A stack-based buffer overflow vulnerability sneaks into Tenda RX3 routers, and it can be exploited remotely! 🔥 Think of it like a mischievous guest at a hotel who tries to stuff too many bags into their room, causing the entire structure to wobble. If successful, they can crash the whole system! An attacker could take control of the router, potentially intercepting your data, altering settings, or even launching attacks on other devices on the network. This could put your entire home network at risk, leaving your personal information vulnerable to exploitation.

Put simply

Think of it like a mischievous guest at a hotel who tries to stuff too many bags into their room, causing the entire structure to wobble. If successful, they can crash the whole system! The vulnerability arises from the manipulation of the `ssid_5g` argument in the `/goform/fast_setting_wifi_set` function, leading to a stack-based buffer overflow that could allow an attacker to execute arbitrary code remotely.

What to do

An attacker could take control of the router, potentially intercepting your data, altering settings, or even launching attacks on other devices on the network. This could put your entire home network at risk, leaving your personal information vulnerable to exploitation. Immediately update your Tenda RX3 to the latest firmware version which addresses this issue. If you can't update right now, consider disconnecting the router from the internet until an upgrade is possible. Regularly review your device settings and network security to ensure best practices are followed. You've got this! With these steps, you’ll be paving the way to a more secure network! 🛡️

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
EPSS
0.00640 · 50.0th percentile
Weaknesses
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer; CWE-121 · Stack-based Buffer Overflow
Published
2026-02-08T19:32Z
EPSS history
Timeline
  • 08 FEB 19:32Z
    Tenda RX3 fast_setting_wifi_set stack-based overflow
    cvelistv5