PT-2026-24930 · Tenda · Tenda W3

Svigo_O · Publicado 2026-02-27 · Atualizado 2026-03-13 · CVE-2026-4007

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Tenda W3 version 1.0.0.3(2204)

Description A stack-based buffer overflow exists in the Tenda W3 version 1.0.0.3(2204). The issue is located in unknown code within the /goform/wifiSSIDget file of the POST Parameter Handler component. Manipulation of the index argument can trigger the buffer overflow, allowing for remote exploitation. The exploit is publicly available.

Recommendations Versions prior to 1.0.0.3(2204) are recommended.

Exploit

Correção

Stack Overflow

Memory Corruption

Buffer Overflow

Enumeração de Fraquezas

CWE-121

CWE-787

CWE-119

Identificadores relacionados

BDU:2026-04261

CVE-2026-4007

Produtos afetados

Tenda W3

Referências · 15

• 🔥 https://github.com/Svigo-o/Tenda_vul/tree/main/tenda-w3-formwrlSSIDget-index-buffer-overflow · Exploit
• https://vuldb.com/?ctiid.350530 · Nota
• https://twitter.com/CVEnew/status/2031992326244221243 · Publicação no Twitter
• https://bdu.fstec.ru/vul/2026-04261 · Nota de Segurança
• https://tenda.com.cn · Nota
• https://t.me/cveNotify/155237 · Publicação no Telegram
• https://t.me/CVEtracker/47237 · Publicação no Telegram
• https://vuldb.com/?submit.769181 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-4007 · Nota de Segurança
• https://twitter.com/cyberbivash/status/2032013045455602020 · Publicação no Twitter
• https://vuldb.com/?id.350530 · Nota
• https://twitter.com/CVEarity/status/2032092451926868085 · Publicação no Twitter
• https://twitter.com/EdgeDetectOps/status/2032343500797166061 · Publicação no Twitter
• https://twitter.com/CveFindCom/status/2031999277052961194 · Publicação no Twitter
• https://cve.org/CVERecord?idCVE-2026-4007 · Nota de Segurança