CVE-2026-3974 in W3
摘要 (英语)
A vulnerability was identified in Tenda W3 1.0.0.3(2204). This vulnerability affects the function formexeCommand of the file /goform/exeCommand of the component HTTP Handler. Such manipulation of the argument cmdinput leads to stack-based buffer overflow. The attack may be performed from remote. The exploit is publicly available and might be used.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
披露
2026-03-12
状态
已确认
条目
VulDB provides additional information and datapoints for this CVE:
| 标识符 | 漏洞 | CWE | 可利用 | 对策 | CVE |
|---|---|---|---|---|---|
| 350409 | Tenda W3 HTTP exeCommand formexeCommand 内存损坏 | 121 | 概念验证 | 未定义 | CVE-2026-3974 |