What is the CVSS score of CVE-2026-36801?

CVE-2026-36801 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. EPSS exploitation probability: 0.0%.

Which versions of Tenda G0 are affected by CVE-2026-36801?

Tenda G0 router firmware v15.11.0.5 contains an unpatched denial-of-service vulnerability allowing unauthenticated network attackers to remotely crash affected devices, creating potential network…

How to fix or mitigate CVE-2026-36801?

Within 24 hours: Inventory all Tenda G0 devices running v15.11.0.5; isolate or restrict network access to affected units pending remediation. Within 7 days: Contact Tenda for firmware roadmap and available alternatives; assess whether upgraded firmware versions for G0 exist. Within 30 days: Either deploy available firmware updates if released, or execute replacement plan for affected devices with supported alternatives; implement network-layer mitigations if devices cannot be removed from service.

Tenda G0 CVE-2026-36801

HIGH

Classic Buffer Overflow (CWE-120)

2026-06-09 mitre

Buffer Overflow Denial Of Service Tenda N A

7.5

CVSS 3.1 · Vendor: mitre

Severity by source

Vendor (mitre) PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Primary rating from Vendor (mitre) · only source for this CVE.

CVSS VectorVendor: mitre

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

Analysis Generated

Jun 10, 2026 - 18:28 vuln.today

CVSS changed

Jun 10, 2026 - 18:22 NVD

7.5 (HIGH)

CVE Published

Jun 09, 2026 - 00:00 nvd

UNKNOWN (no severity yet)

DescriptionCVE.org

Shenzhen Tenda Technology Co., Ltd Tenda G0 v15.11.0.5 was discovered to contain a buffer overflow in the IPMacBindRule parameter of the formIPMacBindAdd function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request.

AnalysisAI

Denial of service in Tenda G0 router firmware v15.11.0.5 allows remote unauthenticated attackers to crash the device by sending a crafted HTTP request to the formIPMacBindAdd handler with an oversized IPMacBindRule parameter. The flaw is a classic stack/heap buffer overflow (CWE-120) reachable over the network without authentication or user interaction, but its impact is limited to availability (CVSS 7.5, A:H only). No public exploit identified at time of analysis and EPSS exploitation probability is negligible at 0.01%.

Technical ContextAI

Tenda G0 is a small-business VPN/router appliance produced by Shenzhen Tenda Technology. Its web management interface exposes a CGI-style endpoint backed by the formIPMacBindAdd function, which processes IP-to-MAC binding rules submitted through the IPMacBindRule HTTP parameter. The underlying weakness is CWE-120 (Classic Buffer Copy Without Checking Size of Input): the handler copies attacker-controlled data into a fixed-size buffer without bounds validation, a pattern repeatedly observed in Tenda's httpd binary across many models. The supplied CPE (cpe:2.3:a:n/a:n/a:*) is a placeholder and does not formally identify the product; the affected product must be derived from the description (Tenda G0 firmware v15.11.0.5).

RemediationAI

No vendor-released patch identified at time of analysis - Tenda has not published an advisory or fixed firmware build in the supplied data. Until a fixed firmware is released, restrict access to the device's web management interface (typically TCP/80 and TCP/443) to trusted management VLANs or jump hosts via ACLs on upstream switches/firewalls, since the vulnerable endpoint is in the admin HTTP service; this trade-off breaks remote browser-based administration. Disable WAN-side management entirely (a setting present on most Tenda devices) to prevent internet-borne exploitation, accepting the loss of remote support workflows. Monitor the research repository at https://github.com/xhh0124/SemVulLLM/tree/main/G0/formIPMacBindAdd and Tenda's security page for an updated firmware build, and consider replacing end-of-support hardware if no patch arrives.