CVE-2026-2186CWE-119CWE-121

Tenda RX3 SetIpMacBind fromSetIpMacBind stack-based overflow

High · published February 8, 2026

CVSS v4.0
8.7
EPSS
1%
Percentile
59.9
In the wild
Unconfirmed
What it is

⚡ A remote stack-based buffer overflow vulnerability lurks in Tenda RX3, and it’s just waiting for a crafty attacker to strike! Think of it like a restaurant where a diner can sneak extra ingredients into their order without the chef noticing. If the chef isn’t careful, that could lead to a recipe disaster! If successfully exploited, an attacker could take control of the device, potentially allowing them to manipulate or intercept your network traffic. This is not just a minor inconvenience — it’s a serious breach that could compromise your entire network security!

Put simply

Think of it like a restaurant where a diner can sneak extra ingredients into their order without the chef noticing. If the chef isn’t careful, that could lead to a recipe disaster! This vulnerability arises from improper handling of arguments in the function fromSetIpMacBind, leading to a stack-based buffer overflow that can be triggered remotely.

What to do

If successfully exploited, an attacker could take control of the device, potentially allowing them to manipulate or intercept your network traffic. This is not just a minor inconvenience — it’s a serious breach that could compromise your entire network security! To safeguard your devices, ensure you update to the latest firmware version immediately to patch this vulnerability. Regularly review your device settings and monitor for any unauthorized access attempts. You’ve got this! Stay proactive, follow these steps, and you’ll reinforce your defenses in no time! 🛡️

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
EPSS
0.00920 · 59.9th percentile
Weaknesses
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer; CWE-121 · Stack-based Buffer Overflow
Published
2026-02-08T21:02Z
EPSS history
Timeline
  • 08 FEB 21:02Z
    Tenda RX3 SetIpMacBind fromSetIpMacBind stack-based overflow
    cvelistv5