CVE-2026-36820
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk23th percentile - higher than 23% of all known CVEs
Summary
A buffer overflow vulnerability was discovered in the webAuthWhiteUserInfo parameter of the formAddWebAuthWhiteUser function in Tenda W20E firmware version 15.11.0.6. This flaw allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request.
Risk Assessment
An attacker can remotely crash the device, leading to network disruption and loss of service availability for users.
Recommendation
Immediately update the Tenda W20E firmware to the latest version if a patch is available, or apply temporary network mitigations such as HTTP traffic filtering.
Original NVD description (English source)
Shenzhen Tenda Technology Co., Ltd Tenda W20E v15.11.0.6 was discovered to contain a buffer overflow in the webAuthWhiteUserInfo parameter of the formAddWebAuthWhiteUser function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request.