Monitor vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.4
Tenda M3 Router Has a Remote Buffer Overflow Flaw
CVE-2026-5567
Summary
A security flaw in the Tenda M3 router can allow hackers to execute malicious code remotely, potentially taking control of the router. This could lead to unauthorized access to your network and sensitive data. To protect your network, update your Tenda M3 router to the latest available version.
Original title
A flaw has been found in Tenda M3 1.0.0.10. This vulnerability affects the function setAdvPolicyData of the file /goform/setAdvPolicyData of the component Destination Handler. Executing a manipulat...
Original description
A flaw has been found in Tenda M3 1.0.0.10. This vulnerability affects the function setAdvPolicyData of the file /goform/setAdvPolicyData of the component Destination Handler. Executing a manipulation of the argument policyType can lead to buffer overflow. The attack can be executed remotely. The exploit has been published and may be used.
nvd CVSS2.0
9.0
nvd CVSS3.1
8.8
nvd CVSS4.0
7.4
Vulnerability type
CWE-119
Buffer Overflow
CWE-120
Classic Buffer Overflow
Published: 5 Apr 2026 · Updated: 5 Apr 2026 · First seen: 5 Apr 2026