← Database

CVE-2026-3802

HIGH CVSS: 8.8 Published: 2026-03-09 Modified: 2026-06-17

Description

A vulnerability was determined in Tenda i3 1.0.0.6(2204). Affected by this issue is the function formexeCommand of the file /goform/exeCommand. Executing a manipulation of the argument cmdinput can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized.

Affected Platforms

Tenda I3 FirmwareTenda I3

Weakness Type

CWE-119, CWE-121

References