CVE-2026-114268: Tenda BE3L Pro WifiBasicSet formWifiBasicSet buffer overflow
A flaw has been found in Tenda BE3L Pro 16.03.60.62. Affected by this vulnerability is the function formWifiBasicSet of the file /goform/WifiBasicSet. This manipulation of the argument security5g causes buffer overflow. It is possible to initiate the attack remotely. The exploit has been published and may be used.
Affected Software
Event History
Frequently Asked Questions
Does exploitation require authentication or user interaction?
The CVSS vector indicates that an attacker needs low-level privileges but does not require user interaction. The attack can be initiated remotely.
What is the potential impact of successful exploitation?
The vulnerability is rated critical with a 9.9 CVSS score. Its vector indicates high impact to confidentiality, integrity, and availability, with scope changed.
Is public exploit code available?
Yes. The available information states that an exploit has been published and may be used.
Which firmware version is known to be affected?
Tenda BE3L Pro firmware version 16.03.60.62 is identified as affected. No unaffected or fixed version is provided.