What is the CVSS score of CVE-2026-36813?

CVE-2026-36813 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. EPSS exploitation probability: 0.0%.

Which versions of Tenda W15E are affected by CVE-2026-36813?

Tenda W15E routers running firmware 15.11.0.10 are vulnerable to remote denial-of-service attacks that crash the device, creating potential network outages and business continuity risk.

How to fix or mitigate CVE-2026-36813?

Within 24 hours: Inventory all Tenda W15E devices in production and confirm firmware version 15.11.0.10 presence. Within 7 days: Implement network-based access controls restricting HTTP/HTTPS management interfaces to trusted internal networks only; disable remote management capabilities if operationally feasible. Within 30 days: Contact Tenda support for firmware update timeline; establish vendor communication for patch availability. If no patch timeline is provided within 30 days, evaluate hardware replacement with actively-supported alternatives.

Tenda W15E CVE-2026-36813

HIGH

Stack-based Buffer Overflow (CWE-121)

2026-06-09 mitre

Denial Of Service Buffer Overflow Stack Overflow Tenda N A

7.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

Analysis Generated

Jun 10, 2026 - 17:26 vuln.today

CVSS changed

Jun 10, 2026 - 17:22 NVD

7.5 (HIGH)

CVE Published

Jun 09, 2026 - 00:00 nvd

UNKNOWN (no severity yet)

DescriptionCVE.org

Shenzhen Tenda Technology Co., Ltd Tenda W15E v15.11.0.10 was discovered to contain a buffer overflow in the picCropName parameter of the formCropAndSetWewifiPic function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request.

AnalysisAI

Denial of service in Tenda W15E router firmware version 15.11.0.10 allows remote unauthenticated attackers to crash the device by sending a crafted HTTP request that triggers a stack-based buffer overflow in the picCropName parameter of the formCropAndSetWewifiPic function. No public exploit identified at time of analysis, and EPSS scoring of 0.01% indicates very low predicted exploitation probability, though a research repository hosting analysis artifacts exists on GitHub.

Technical ContextAI

The Tenda W15E is an enterprise-grade wireless access point/router commonly deployed in small-to-medium business environments. The vulnerability resides in the formCropAndSetWewifiPic handler, which processes WiFi picture cropping requests via the device's HTTP-based web management interface. The flaw is classified as CWE-121 (Stack-Based Buffer Overflow), meaning user-supplied input for the picCropName parameter is copied into a fixed-size stack buffer without adequate length validation, corrupting the call stack and crashing the embedded HTTP server process. The CPE data is generic (cpe:2.3:a:n/a:n/a) and does not pin the affected product in NVD's structured format, so identification relies on the description text and the linked research repository (xhh0124/SemVulLLM).

RemediationAI

No vendor-released patch identified at time of analysis, and no Tenda advisory URL is included in the references. Administrators should monitor Tenda's official support channels (tendacn.com) for firmware updates beyond 15.11.0.10 addressing the formCropAndSetWewifiPic handler. As compensating controls, restrict access to the device's HTTP management interface to a dedicated management VLAN or specific administrator IP addresses via ACLs, which prevents untrusted networks from reaching the vulnerable endpoint at the cost of requiring administrators to connect from authorized locations. Disabling remote/WAN-side web administration if enabled eliminates internet-facing exposure but blocks legitimate remote management. If the device is end-of-life or no patch materializes, plan replacement with a supported model, since DoS of an access point/router disrupts all downstream connectivity.