Which versions of Tenda are affected by EUVD-2026-13729?

A critical remote code execution vulnerability affects Tenda A18 Pro routers (firmware 02.03.02.28) that allows authenticated attackers to gain complete control of affected devices.

Is there a public PoC exploit available for EUVD-2026-13729?

Yes, a public proof-of-concept exploit is available for EUVD-2026-13729. Prioritise patching immediately. EPSS: 0.0%.

How to fix or mitigate EUVD-2026-13729?

Within 24 hours: Inventory all Tenda A18 Pro routers in your environment and isolate affected devices from critical network segments. Within 7 days: Implement network access controls restricting administrative access to these devices and enable detailed logging for all authentication attempts. Within 30 days: Either upgrade to patched firmware upon vendor release or replace affected routers with alternative vendor equipment; monitor Tenda security advisories daily for patch availability.

Tenda EUVD-2026-13729

Q: What is the CVSS score of EUVD-2026-13729?

EUVD-2026-13729 has a CVSS 4.0 base score of 7.4 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

| CVE-2026-4489 HIGH

Stack-based Buffer Overflow (CWE-121)

2026-03-20 VulDB

Tenda Buffer Overflow Stack Overflow

7.4

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

7.4 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Re-analysis Queued

Apr 22, 2026 - 21:37 vuln.today

cvss_changed

CVSS changed

Apr 22, 2026 - 21:37 NVD

8.8 (HIGH) 7.4 (HIGH)

PoC Detected

Mar 24, 2026 - 15:54 vuln.today

Public exploit code

EUVD ID Assigned

Mar 20, 2026 - 16:15 euvd

EUVD-2026-13729

Analysis Generated

Mar 20, 2026 - 16:15 vuln.today

CVE Published

Mar 20, 2026 - 16:02 nvd

HIGH 8.8

DescriptionCVE.org

A vulnerability was detected in Tenda A18 Pro 02.03.02.28. This vulnerability affects the function form_fast_setting_wifi_set of the file /goform/fast_setting_wifi_set. The manipulation results in stack-based buffer overflow. The attack may be launched remotely. The exploit is now public and may be used.

AnalysisAI

Stack-based buffer overflow in Tenda A18 Pro firmware version 02.03.02.28 allows authenticated remote attackers to achieve complete system compromise through the /goform/fast_setting_wifi_set endpoint. Public exploit code is available and actively being weaponized against this unpatched vulnerability. Attackers with network access and valid credentials can execute arbitrary code with full system privileges.

Technical ContextAI

This vulnerability affects the Tenda A18 Pro wireless router (CPE: cpe:2.3:a:tenda:a18_pro:*:*:*:*:*:*:*:*) running firmware version 02.03.02.28. The root cause is a CWE-121 stack-based buffer overflow in the form_fast_setting_wifi_set function, which handles WiFi configuration through the /goform/fast_setting_wifi_set endpoint. Stack-based buffer overflows occur when data is written beyond the boundaries of a fixed-size buffer allocated on the stack, potentially overwriting adjacent memory including return addresses and control flow data. This class of vulnerability can lead to arbitrary code execution as attackers can hijack program execution by carefully crafting malicious input that overwrites critical stack data.

RemediationAI

Users should immediately check the Tenda website at https://www.tenda.com.cn/ for updated firmware releases addressing this vulnerability and upgrade to the latest available version as soon as possible. Until patching is completed, implement network-level mitigations including disabling remote administration access to the router's web interface, restricting management interface access to trusted internal IP addresses only, changing default credentials to strong unique passwords, and placing the router behind additional firewall protection if possible. Organizations should consider replacing affected devices if Tenda does not release a security patch within a reasonable timeframe, as end-of-life or poorly supported consumer networking equipment poses ongoing security risks.