Which versions of Tenda are affected by CVE-2026-4490?

A critical remote code execution vulnerability affects Tenda A18 Pro routers with a publicly available exploit, enabling unauthenticated attackers to gain complete control of affected devices.

Is there a public PoC exploit available for CVE-2026-4490?

Yes, a public proof-of-concept exploit is available for CVE-2026-4490. Prioritise patching immediately. EPSS: 0.0%.

How to fix or mitigate CVE-2026-4490?

Within 24 hours: Identify and inventory all Tenda A18 Pro routers running firmware 02.03.02.28; assess network exposure and isolate affected devices from critical systems if possible. Within 7 days: Implement network-level mitigations (WAF rules blocking /goform/openSchedWifi, restrict administrative access to trusted networks only); contact Tenda for patch ETA and consider temporary disabling of scheduled WiFi functionality if operationally feasible. Within 30 days: Develop migration plan to replace vulnerable routers with patched firmware or alternative vendors; establish vendor communication protocol for future vulnerability disclosures.

Tenda CVE-2026-4490

Q: What is the CVSS score of CVE-2026-4490?

CVE-2026-4490 has a CVSS 4.0 base score of 7.4 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-13736 HIGH

Stack-based Buffer Overflow (CWE-121)

2026-03-20 VulDB

Buffer Overflow Stack Overflow Tenda

7.4

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

7.4 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Re-analysis Queued

Apr 22, 2026 - 21:37 vuln.today

cvss_changed

CVSS changed

Apr 22, 2026 - 21:37 NVD

8.8 (HIGH) 7.4 (HIGH)

PoC Detected

Mar 24, 2026 - 15:54 vuln.today

Public exploit code

EUVD ID Assigned

Mar 20, 2026 - 16:45 euvd

EUVD-2026-13736

Analysis Generated

Mar 20, 2026 - 16:45 vuln.today

CVE Published

Mar 20, 2026 - 16:32 nvd

HIGH 8.8

DescriptionCVE.org

A flaw has been found in Tenda A18 Pro 02.03.02.28. This issue affects the function setSchedWifi of the file /goform/openSchedWifi. This manipulation causes stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been published and may be used.

AnalysisAI

Stack-based buffer overflow in Tenda A18 Pro firmware version 02.03.02.28 enables authenticated remote attackers to achieve code execution with high privileges through the setSchedWifi function. Public exploit code is available for this vulnerability, and no patch has been released, leaving affected devices exposed to active exploitation. An attacker with network access and valid credentials can trigger the overflow to compromise system integrity and confidentiality.

Technical ContextAI

This vulnerability affects the Tenda A18 Pro router (CPE: cpe:2.3:a:tenda:a18_pro) and is classified as CWE-121, a stack-based buffer overflow. The flaw exists in the setSchedWifi function within the /goform/openSchedWifi endpoint, which likely handles scheduled WiFi configuration settings. Stack-based buffer overflows occur when data is written beyond the allocated stack buffer boundaries, allowing attackers to overwrite adjacent memory including return addresses and function pointers. In embedded router devices with limited memory protections, this class of vulnerability frequently enables arbitrary code execution, allowing attackers to hijack control flow and execute malicious payloads with the privileges of the web server process.

RemediationAI

No official patch or firmware update has been referenced in available intelligence sources (CVSS remediation level is marked as unavailable/X), and the vendor website at https://www.tenda.com.cn/ should be monitored for security updates addressing firmware version 02.03.02.28. Until an official patch becomes available, organizations should implement network-level compensating controls including restricting access to the router's administrative interface to trusted management networks only, changing default credentials to strong unique passwords, disabling remote administration features if not required, and placing affected devices behind additional firewall layers. Consider replacing affected devices with alternative router models if Tenda does not release timely security updates, as the public exploit availability creates ongoing risk. Monitor the VulDB entries and GitHub repository at https://github.com/lilukun337/cve/issues/2 for updates on exploit evolution and potential mitigation techniques.