CVE-2026-3975 in W3

Sumário (Inglês)

A security flaw has been discovered in Tenda W3 1.0.0.3(2204). This issue affects the function formWifiMacFilterGet of the file /goform/WifiMacFilterGet of the component POST Parameter Handler. Performing a manipulation of the argument wl_radio results in stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Divulgação

12/03/2026

Estado

Confirmado

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
350410	Tenda W3 POST Parameter WifiMacFilterGet formWifiMacFilterGet Excesso de tampão	121	Prova de conceito	Não definido	CVE-2026-3975

Fontes

• MITRE
• NVD
• CVE Details