Is there a public PoC exploit available for EUVD-2026-26307?

Yes, a public proof-of-concept exploit is available for EUVD-2026-26307. Prioritise patching immediately. EPSS: 0.0%.

How to fix or mitigate EUVD-2026-26307?

Within 24 hours: Identify all Tenda 4G300 devices in production using network discovery tools and document firmware versions. Within 7 days: Implement network segmentation to isolate affected routers and restrict administrative access to essential personnel only; verify user access logs for unauthorized authentication attempts. Within 30 days: Contact Tenda for patch timeline and availability; evaluate replacement options with alternative router models; implement enhanced network monitoring on router management interfaces.

Tenda 4G300 EUVD-2026-26307

Q: What is the CVSS score of EUVD-2026-26307?

EUVD-2026-26307 has a CVSS 4.0 base score of 7.4 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

| CVE-2026-7470 HIGH

Stack-based Buffer Overflow (CWE-121)

2026-04-30 VulDB

Tenda Buffer Overflow Stack Overflow

7.4

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

7.4 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

PoC Detected

Apr 30, 2026 - 20:41 vuln.today

Public exploit code

Analysis Generated

Apr 30, 2026 - 03:30 vuln.today

CVSS changed

Apr 30, 2026 - 03:22 NVD

8.8 (HIGH) 7.4 (HIGH)

EUVD ID Assigned

Apr 30, 2026 - 03:15 euvd

EUVD-2026-26307

Analysis Generated

Apr 30, 2026 - 03:15 vuln.today

CVE Published

Apr 30, 2026 - 02:30 nvd

HIGH 7.4

DescriptionCVE.org

A flaw has been found in Tenda 4G300 US_4G300V1.0Mt_V1.01.42_CN_TDC01. Affected is the function sub_427C3C of the file /goform/SafeMacFilter. This manipulation of the argument page causes stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been published and may be used.

AnalysisAI

Stack-based buffer overflow in Tenda 4G300 US_4G300V1.0Mt_V1.01.42_CN_TDC01 allows authenticated remote attackers to execute arbitrary code with elevated privileges via crafted SafeMacFilter requests. The vulnerability resides in function sub_427C3C at endpoint /goform/SafeMacFilter, where insufficient input validation of the 'page' parameter enables memory corruption. Public exploit code exists on GitHub (Axelioc/CVE), significantly lowering the barrier to exploitation for attackers with valid router credentials. CVSS 7.4 reflects high confidentiality, integrity, and availability impact requiring only low-privilege authentication.

Technical ContextAI

This vulnerability affects the Tenda 4G300 wireless router (CPE: cpe:2.3:a:tenda:4g300), specifically firmware version US_4G300V1.0Mt_V1.01.42_CN_TDC01. The flaw is a stack-based buffer overflow (CWE-121) in the web management interface's MAC address filtering functionality. The vulnerable function sub_427C3C processes HTTP POST requests to /goform/SafeMacFilter without proper bounds checking on the 'page' parameter, allowing an attacker to write arbitrary data beyond allocated stack buffer boundaries. This is a classic stack overflow condition where unvalidated user input directly overwrites adjacent memory regions, potentially including return addresses and function pointers. Embedded device web interfaces written in C/C++ are particularly susceptible to such memory safety issues when handling CGI parameters. The CVSS 4.0 vector (AV:N/AC:L/PR:L) indicates network-accessible exploitation with low attack complexity once authenticated, while the E:P modifier confirms proof-of-concept exploit code exists.

RemediationAI

No vendor-released patch identified at time of analysis for firmware version US_4G300V1.0Mt_V1.01.42_CN_TDC01. Check Tenda's official support site (https://www.tenda.com.cn/) for newer firmware releases that may address this vulnerability, though consumer router vendors often do not provide CVE-specific patch notes. Immediate compensating controls: (1) Disable remote administration on WAN interface - restrict web management access to LAN-side clients only, eliminating internet-based attack surface (trade-off: no remote management capability); (2) Change default administrative credentials to strong unique passwords (16+ characters, mixed case, numbers, symbols) to prevent credential-based initial access; (3) Implement network segmentation - place Tenda device on isolated VLAN if used in enterprise environment, preventing pivot to critical assets post-compromise; (4) Monitor for unauthorized login attempts and configuration changes in router logs. Long-term recommendation: Replace Tenda 4G300 with actively maintained router models from vendors with established security update programs, as this device appears to be end-of-life with no security support. For SOHO deployments, consumer-grade alternatives with automatic update mechanisms provide better ongoing security posture.