Which versions of Tenda are affected by EUVD-2026-13738?

A critical vulnerability in Tenda A18 Pro routers allows authenticated attackers to execute arbitrary code, potentially compromising network security and sensitive data.

Is there a public PoC exploit available for EUVD-2026-13738?

Yes, a public proof-of-concept exploit is available for EUVD-2026-13738. Prioritise patching immediately. EPSS: 0.0%.

How to fix or mitigate EUVD-2026-13738?

Within 24 hours: Identify all Tenda A18 Pro devices running firmware 02.03.02.28 in your environment and isolate them from critical systems; disable the /goform/SetIpMacBind endpoint if possible. Within 7 days: Implement network segmentation to restrict administrative access to these devices; deploy WAF rules to block malicious requests to the vulnerable endpoint. Within 30 days: Replace affected routers with alternative vendors or wait for firmware patches; conduct forensic analysis of router logs for signs of exploitation.

Tenda EUVD-2026-13738

Q: What is the CVSS score of EUVD-2026-13738?

EUVD-2026-13738 has a CVSS 4.0 base score of 7.4 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

| CVE-2026-4491 HIGH

Stack-based Buffer Overflow (CWE-121)

2026-03-20 VulDB

Tenda Buffer Overflow Stack Overflow

7.4

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

7.4 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Re-analysis Queued

Apr 22, 2026 - 21:37 vuln.today

cvss_changed

CVSS changed

Apr 22, 2026 - 21:37 NVD

8.8 (HIGH) 7.4 (HIGH)

PoC Detected

Mar 24, 2026 - 15:54 vuln.today

Public exploit code

EUVD ID Assigned

Mar 20, 2026 - 16:45 euvd

EUVD-2026-13738

Analysis Generated

Mar 20, 2026 - 16:45 vuln.today

CVE Published

Mar 20, 2026 - 16:32 nvd

HIGH 8.8

DescriptionCVE.org

A vulnerability has been found in Tenda A18 Pro 02.03.02.28. Impacted is the function fromSetIpMacBind of the file /goform/SetIpMacBind. Such manipulation of the argument list leads to stack-based buffer overflow. The attack can be executed remotely. The exploit has been disclosed to the public and may be used.

AnalysisAI

Stack-based buffer overflow in Tenda A18 Pro firmware version 02.03.02.28 allows remote attackers with low privileges to achieve complete system compromise through manipulation of the SetIpMacBind function arguments. Public exploit code exists for this vulnerability, and no patch is currently available. An authenticated attacker can execute arbitrary code remotely without user interaction, affecting confidentiality, integrity, and availability of affected devices.

Technical ContextAI

This vulnerability affects the Tenda A18 Pro wireless router (CPE: cpe:2.3:a:tenda:a18_pro:*:*:*:*:*:*:*:*) running firmware version 02.03.02.28. The flaw is classified as CWE-121 (Stack-based Buffer Overflow), which occurs when the fromSetIpMacBind function in the /goform/SetIpMacBind endpoint fails to properly validate the size of user-supplied input to the 'list' parameter before copying it to a fixed-size stack buffer. This function appears to handle IP-MAC address binding configuration, a common network management feature in consumer routers. Stack-based buffer overflows allow attackers to overwrite return addresses and execute arbitrary code in the context of the web server process, typically running with elevated privileges on embedded devices.

RemediationAI

As of the current intelligence data, no official patch or firmware update has been released by Tenda to address this vulnerability (CVSS remediation level RL:X indicates unavailable fix). Users should immediately check the vendor website at https://www.tenda.com.cn/ for any firmware updates beyond version 02.03.02.28 and apply them if available. Until an official patch is released, implement network-level mitigations including: disable remote administration features on the router, restrict access to the web management interface to trusted IP addresses only through firewall rules, change default administrative credentials to strong unique passwords, and place affected devices behind additional firewall protection to limit exposure. Organizations with high security requirements should consider replacing affected devices with alternative router models from vendors with more responsive security update programs. Monitor VulDB references (https://vuldb.com/?id.352017 and https://vuldb.com/?ctiid.352017) for updates on vendor response and patch availability.