CVE-2026-3801

A vulnerability was found in Tenda i3 1.0.0.6(2204). Affected by this vulnerability is the function formSetAutoPing of the file /goform/setAutoPing. Performing a manipulation of the argument ping1/ping2 results in stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been made public and could be used.

• CWE-119
• CWE-121

• https://github.com/Svigo-o/Tenda_vul/tree/main/tenda-i3-setautoping-ping1-buffer-overflowExploit, Third Party Advisory
• https://github.com/Svigo-o/Tenda_vul/tree/main/tenda-i3-setautoping-ping2-buffer-overflowExploit, Third Party Advisory
• https://vuldb.com/?ctiid.349768Permissions Required, VDB Entry
• https://vuldb.com/?id.349768Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.768980Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.768982Third Party Advisory, VDB Entry
• https://www.tenda.com.cn/Product

Published

Mar 9, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-3798A vulnerability was detected in Comfast CF-AC100 2.6.0.8. Th…7.2
• CVE-2026-37980A flaw was found in Keycloak, specifically in the organizati…4.8
• CVE-2026-37981A flaw was found in Keycloak. A broken access control vulner…4.3
• CVE-2026-37982A flaw was found in Keycloak. This authentication vulnerabil…6.8
• CVE-2026-3799A flaw has been found in Tenda i3 1.0.0.6(2204). This impact…8.8
• CVE-2026-3800A vulnerability has been found in SourceCodester/janobe Reso…8.8
• CVE-2026-3802A vulnerability was determined in Tenda i3 1.0.0.6(2204). Af…8.8
• CVE-2026-3803A vulnerability was identified in Tenda i3 1.0.0.6(2204). Th…8.8
• CVE-2026-3804A security flaw has been discovered in Tenda i3 1.0.0.6(2204…8.8
• CVE-2026-3805When doing a second SMB request to the same host again, curl…7.5
• CVE-2026-38057The iDirect iQ200 does not validate CSRF tokens on state-cha…8.1
• CVE-2026-38059The iDirect iQ200 exposes the /api/identity and /api/ REST A…8.7