CVE-2026-5036

HIGH 8.8

Tenda 4G06 Endpoint DhcpListClient fromDhcpListClient stack-based overflow

CVSS Score

8.8

EPSS Score

0.0%

EPSS Percentile

14th

A vulnerability was found in Tenda 4G06 04.06.01.29. This vulnerability affects the function fromDhcpListClient of the file /goform/DhcpListClient of the component Endpoint. Performing a manipulation of the argument page results in stack-based buffer overflow. The attack can be initiated remotely. The exploit has been made public and could be used.

CWE	CWE-121 CWE-119
Vendor	tenda
Product	4g06
Published	Mar 29, 2026
Last Updated	Mar 30, 2026

Stay Ahead of the Next One

Get instant alerts for tenda 4g06

Be the first to know when new high vulnerabilities affecting tenda 4g06 are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

Tenda / 4G06

04.06.01.29

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/353962 vuldb.com: https://vuldb.com/vuln/353962/cti vuldb.com: https://vuldb.com/submit/778625 github.com: https://github.com/Kiciot/cve/issues/1 tenda.com.cn: https://www.tenda.com.cn/

Credits

🔍 kiciot (VulDB User)