Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

Tenda W20E Router: Malicious Request Can Crash Device

CVE-2026-36819 · published 4 months ago
Summary

A security issue affects the Tenda W20E router's DHCP settings. If exploited, it can cause the router to crash, disrupting internet access. To stay protected, update the router to the latest firmware version.

Original advisory text
Shenzhen Tenda Technology Co., Ltd Tenda W20E v15.11.0.6 was discovered to contain a buffer overflow in the bindMACAddr parameter of the fromSetDhcpRules function. This vulnerability allows attacke...
Shenzhen Tenda Technology Co., Ltd Tenda W20E v15.11.0.6 was discovered to contain a buffer overflow in the bindMACAddr parameter of the fromSetDhcpRules function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker partial control
Severity
7.5 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-121Stack-based Buffer Overflow
Timeline
Published9 Jun 2026
Updated4 Nov 2026
First seen9 Jun 2026
Sources
CVE-2026-36819 · NVD
Track software like this
Free during beta