What is the CVSS score of CVE-2026-36815?

CVE-2026-36815 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. EPSS exploitation probability: 0.0%.

Which versions of Tenda W15E are affected by CVE-2026-36815?

Tenda W15E router firmware v15.11.0.10 is vulnerable to remote denial-of-service attacks that can completely crash the device, disrupting network availability for affected organizations.

How to fix or mitigate CVE-2026-36815?

Within 24 hours: Inventory all Tenda W15E routers in the network, especially v15.11.0.10 firmware version. Within 7 days: Implement network segmentation to restrict HTTP management interface access to trusted administrative subnets only, or disable the HTTP management service if alternatives exist. Within 30 days: Monitor Tenda's security advisories for firmware updates; prepare replacement hardware procurement in case a patch does not materialize.

Tenda W15E CVE-2026-36815

HIGH

Classic Buffer Overflow (CWE-120)

2026-06-09 mitre

Buffer Overflow Tenda Denial Of Service N A

7.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

vuln.today AI

7.5 HIGH

Endpoint is reachable over the network without authentication or user interaction; a single crafted request crashes httpd, yielding availability-only impact with no confidentiality or integrity loss.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Primary rating from NVD.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

Analysis Generated

Jun 10, 2026 - 20:24 vuln.today

CVSS changed

Jun 10, 2026 - 20:22 NVD

7.5 (HIGH)

CVE Published

Jun 09, 2026 - 00:00 nvd

UNKNOWN (no severity yet)

DescriptionNVD

Shenzhen Tenda Technology Co., Ltd Tenda W15E v15.11.0.10 was discovered to contain a buffer overflow in the hostname parameter of the formSetNetCheckTools function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request.

AnalysisAI

Denial of service in Tenda W15E router firmware v15.11.0.10 allows remote unauthenticated attackers to crash the device by sending a crafted HTTP request containing an oversized hostname parameter to the formSetNetCheckTools handler. The classic stack buffer overflow (CWE-120) currently shows no public exploit identified at time of analysis and a very low EPSS score of 0.01%, but the network-reachable management interface makes any exposed device trivially disruptable.

Technical ContextAI

The Tenda W15E is an enterprise/SMB wireless router whose web-management firmware exposes a CGI-style endpoint named formSetNetCheckTools, typically used for diagnostic utilities such as ping or traceroute. The hostname parameter passed into this handler is copied into a fixed-size stack buffer without proper bounds checking, the canonical CWE-120 classic buffer overflow pattern that is endemic to Tenda's httpd binaries. The supplied research reference (github.com/xhh0124/SemVulLLM) indicates this issue was surfaced via semantic LLM-assisted vulnerability discovery against the W15E firmware image. The CPE string in the input is a placeholder (cpe:2.3:a:n/a:n/a:*) and does not authoritatively enumerate affected products - the description alone constrains scope to W15E v15.11.0.10.

RemediationAI

No vendor-released patch identified at time of analysis; Tenda has not published an advisory or fixed firmware in the supplied references. Until Tenda issues updated W15E firmware, restrict access to the device's web management interface to a dedicated management VLAN or trusted admin workstations and confirm that remote/WAN management is disabled (this is the default and the single most effective compensating control, with the trade-off that legitimate remote administration is also blocked). Place the router behind a reverse proxy or upstream firewall that enforces a hostname-length limit on requests to /goform/formSetNetCheckTools (side effect: legitimate diagnostic requests with long hostnames will be rejected), and monitor for unexpected httpd restarts as an indicator of attempted exploitation. Track the vendor advisory page at tendacn.com for a fixed firmware release and apply it as soon as available.