What is the CVSS score of EUVD-2026-35076?

EUVD-2026-35076 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. EPSS exploitation probability: 0.3%.

Which versions of Tenda AC1206 are affected by EUVD-2026-35076?

Tenda AC1206 routers (firmware v15.03.06.23) are vulnerable to unauthenticated denial of service attacks via the web management interface that can crash the device remotely.

How to fix or mitigate EUVD-2026-35076?

Within 24 hours: Inventory all Tenda AC1206 devices and confirm which are running vulnerable firmware v15.03.06.23; assess network exposure of the web management interface. Within 7 days: Restrict network access to the management interface via firewall to authorized administrative networks only; disable remote management if operationally feasible. Within 30 days: Develop and execute a replacement or upgrade plan for affected devices, as no vendor patch is anticipated.

Tenda AC1206 EUVD-2026-35076

| CVE-2026-36789 HIGH

Stack-based Buffer Overflow (CWE-121)

2026-06-08 mitre

GHSA-qvqm-ccp5-gr98

Denial Of Service Tenda Stack Overflow Buffer Overflow

7.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

Analysis Generated

Jun 08, 2026 - 19:24 vuln.today

CVSS changed

Jun 08, 2026 - 19:22 NVD

7.5 (HIGH)

CVE Published

Jun 08, 2026 - 00:00 nvd

UNKNOWN (no severity yet)

DescriptionCVE.org

Shenzhen Tenda Technology Co., Ltd Tenda AC1206 v15.03.06.23 was discovered to contain multiple stack overflows in the fromGstDhcpSetSer function via the username and password parameters. These vulnerabilities allow attackers to cause a Denial of Service (DoS) via a crafted HTTP request.

AnalysisAI

Denial of service in Tenda AC1206 routers (firmware v15.03.06.23) is triggered by stack-based buffer overflows in the fromGstDhcpSetSer function reachable through the username and password parameters of a crafted HTTP request. Remote attackers with network reach to the device's web management interface can crash the service without authentication, and no public exploit identified at time of analysis although proof-of-concept research material is hosted on GitHub.

Technical ContextAI

The AC1206 is a SOHO wireless router whose web-administration daemon exposes DHCP server configuration through the fromGstDhcpSetSer handler. The flaw is classified as CWE-121 (Stack-based Buffer Overflow), meaning the handler copies attacker-supplied username and password parameters into fixed-size stack buffers without bounds enforcement, corrupting the saved return address or adjacent stack frames. Tenda's consumer firmware is built on a stripped-down Linux/BusyBox stack with limited mitigations (often missing stack canaries and ASLR on the httpd binary), which is why memory-corruption issues in these CGI-style handlers typically produce reliable crashes. The CPE entry is generic (cpe:2.3:a:n/a:n/a) and does not encode the exact device or version, so identification depends on the description itself.

RemediationAI

No vendor-released patch identified at time of analysis; Tenda has not published a fixed firmware version in the supplied references, so administrators should monitor https://www.tendacn.com/ for an AC1206 firmware update superseding v15.03.06.23 and apply it as soon as one is released. As compensating controls, ensure remote (WAN-side) web administration is disabled in the router settings - this eliminates internet-borne exploitation but does not stop a malicious LAN client; restrict LAN-side access to the management interface via a dedicated management VLAN or by blocking the router's admin IP from untrusted SSIDs and guest networks, accepting the trade-off that legitimate admins must connect from the management segment; and, where feasible, replace end-of-life AC1206 hardware with a currently supported model since Tenda consumer devices historically receive limited security maintenance. Reference VulDB entry https://vuldb.com/vuln/369189 and NVD https://nvd.nist.gov/vuln/detail/CVE-2026-36789 for tracking any future fix publication.