What is the CVSS score of CVE-2026-36811?

CVE-2026-36811 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. EPSS exploitation probability: 0.0%.

Which versions of Tenda W15E are affected by CVE-2026-36811?

Tenda W15E router firmware v15.11.0.10 contains an unauthenticated denial-of-service vulnerability allowing remote attackers to crash affected devices, creating network outages for SOHO and SMB…

How to fix or mitigate CVE-2026-36811?

Within 24 hours: Inventory all Tenda W15E routers running firmware v15.11.0.10 or earlier; document current versions, deployment locations, and network dependencies. Within 7 days: Deploy rate limiting and input validation on HTTP requests to affected devices via upstream firewalls or WAF rules; restrict administrative access to these routers to internal IP ranges only; implement continuous monitoring for device unavailability. Within 30 days: Contact Tenda for patch timeline and ETA; evaluate migration to alternative router vendors with active security support; develop replacement plan prioritizing business-critical network segments.

Tenda W15E CVE-2026-36811

HIGH

Classic Buffer Overflow (CWE-120)

2026-06-09 mitre

Buffer Overflow Tenda Denial Of Service N A

7.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

vuln.today AI

7.5 HIGH

Network-reachable httpd endpoint with no auth or user interaction; crafted parameter reliably crashes the daemon, yielding availability-only impact with no confidentiality or integrity loss.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Primary rating from NVD.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

Analysis Generated

Jun 10, 2026 - 20:23 vuln.today

CVSS changed

Jun 10, 2026 - 20:22 NVD

7.5 (HIGH)

CVE Published

Jun 09, 2026 - 00:00 nvd

UNKNOWN (no severity yet)

DescriptionNVD

Shenzhen Tenda Technology Co., Ltd Tenda W15E v15.11.0.10 was discovered to contain a buffer overflow in the picName parameter of the formDelwebAuthPic function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request.

AnalysisAI

Denial of service in Tenda W15E router firmware v15.11.0.10 allows remote unauthenticated attackers to crash the device by sending a crafted HTTP request with an oversized picName parameter to the formDelwebAuthPic handler. No public exploit identified at time of analysis, and EPSS rates real-world exploitation probability at just 0.02% (4th percentile), but the affected SOHO/SMB router class is a frequent target once weaponized PoCs emerge.

Technical ContextAI

The Tenda W15E is an enterprise-grade wireless access controller/router. The vulnerable formDelwebAuthPic function is part of the device's web-based management interface (httpd/goahead-style embedded web server commonly used in Tenda firmware) and handles deletion of web authentication pictures. The root cause is CWE-120 (Classic Buffer Overflow / Buffer Copy without Checking Size of Input): the picName HTTP parameter is copied into a fixed-size stack or heap buffer without bounds validation, corrupting adjacent memory and causing the httpd process to crash. The supplied CPE string (cpe:2.3:a:n/a:n/a:*) is a malformed placeholder rather than a proper vendor/product CPE, so authoritative product matching must rely on the description.

RemediationAI

No vendor-released patch identified at time of analysis; Tenda has not published an advisory in the supplied references. Until a fixed firmware build is released, restrict access to the W15E web management interface (typically TCP/80 and TCP/443) to a dedicated management VLAN or trusted admin workstations using ACLs on upstream switches/firewalls, and ensure the WAN-side management interface is disabled (side effect: remote admin via WAN will no longer function, requiring on-site or VPN access). Monitor the Tenda support site (https://www.tendacn.com) for a firmware update superseding 15.11.0.10 and apply it once available; if the device is end-of-life, plan replacement, since unpatched embedded HTTP services are routinely chained into botnets. The single reference https://github.com/xhh0124/SemVulLLM/tree/main/W15E/formDelwebAuthPic documents the bug location but is not a vendor remediation source.