Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

CVE-2026-36797: Tenda G0 v15.11.0.5: Malicious request can crash the router

CVE-2026-36797 · published 4 months ago
Summary

The Tenda G0 router's software has a weakness that could allow hackers to send a special request to the router, causing it to stop working. This is a concern because it could leave your network without internet access. To protect your network, update your Tenda G0 router's software to the latest version as soon as possible.

Original advisory text
Shenzhen Tenda Technology Co., Ltd Tenda G0 v15.11.0.5 was discovered to contain a stack overflow in the IPMacBindRuleIp parameter of the formIPMacBindModify function. This vulnerability allows att...
Shenzhen Tenda Technology Co., Ltd Tenda G0 v15.11.0.5 was discovered to contain a stack overflow in the IPMacBindRuleIp parameter of the formIPMacBindModify function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request.
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker partial control
Severity
7.5 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-120Classic Buffer Overflow
Timeline
Published9 Jun 2026
Updated4 Nov 2026
First seen10 Jun 2026
Sources
Track software like this
Free during beta