CVE-2026-114268 Details
Description
A flaw has been found in Tenda BE3L Pro 16.03.60.62. Affected by this vulnerability is the function formWifiBasicSet of the file /goform/WifiBasicSet. This manipulation of the argument security_5g causes buffer overflow. It is possible to initiate the attack remotely. The exploit has been published and may be used.
A buffer overflow vulnerability has been identified in the Tenda BE3L Pro router, specifically in version 16.03.60.62. The issue arises in the formWifiBasicSet function within the /goform/WifiBasicSet file. The vulnerability is triggered by manipulating the security_5g parameter, which leads to memory corruption. This flaw can be exploited remotely, potentially causing application crashes, arbitrary code execution, or unauthorized access to sensitive information.
To address this vulnerability, Tenda should update the router's firmware to a version that fixes the buffer overflow issue. Users can check the Tenda website or contact Tenda support for information on available firmware updates.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 21, 2026CISA-ADP
Assessed Oct 28, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/Tmzop/Tenda-CVE | [email protected] | ExploitTechnical Analysis |
| https://vuldb.com/cve/CVE-2026-114268 | [email protected] | AdvisoryPermission Required |
| https://vuldb.com/submit/1018994 | [email protected] | Issue TrackingPermission Required |
| https://vuldb.com/vuln/424700 | [email protected] | AdvisoryPermission Required |
| https://vuldb.com/vuln/424700/cti | [email protected] | Content Wall |
| https://www.tenda.com.cn/ | [email protected] | Vendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-119 | Improper Restriction of Operations within the Bounds of a Memory Buffer | [email protected] |
| CWE-120 | Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| Tenda BE3L Pro | 16.03.60.62 |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Oct 28, 2026 | CVE Modified | CISA-ADP |
| Oct 21, 2026 | New CVE Received | [email protected] |