CVE-2026-114268

Summary

A buffer overflow in the /goform/WifiBasicSet endpoint of Tenda BE3L Pro firmware v16.03.60.62 allows remote attackers to overwrite memory via the security_5g parameter, potentially enabling code execution or denial of service.

Exploitability

Exploitation requires low privileges (authenticated user) and no user interaction; the exploit is publicly available.

Blast radius

Successful exploitation could lead to full system compromise (remote code execution), data exfiltration, or device unavailability, affecting all connected network users.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to firmware version 16.03.60.63 or later, as the vendor has not yet released a fixed version for this specific vulnerability in the published description.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.