PatchSiren cyber security CVE debrief
CVE-2026-36796 Shenzhen Tenda Technology Co., Ltd CVE debrief
A stack overflow vulnerability was discovered in the picCropName parameter of the formCropAndSetWewifiPic function in Shenzhen Tenda Technology Co., Ltd Tenda G0 v15.11.0.5. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request.
- Vendor
- Shenzhen Tenda Technology Co., Ltd
- Product
- Tenda G0
- CVSS
- HIGH 7.5
- CISA KEV
- Not listed in stored evidence
- Original CVE published
- 2026-06-09
- Original CVE updated
- 2026-06-10
- Advisory published
- 2026-06-09
- Advisory updated
- 2026-06-10
Who should care
Users of Shenzhen Tenda Technology Co., Ltd Tenda G0 v15.11.0.5 should be aware of this vulnerability and take steps to mitigate it.
Technical summary
The vulnerability has a CVSS score of 7.5 and a CVSS severity of HIGH. The CVSS vector is CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. The weakness is classified as CWE-120.
Defensive priority
HIGH
Recommended defensive actions
- Apply patches or updates provided by the vendor to fix the vulnerability.
- Restrict access to the affected system to prevent exploitation.
Evidence notes
The vulnerability was discovered in the picCropName parameter of the formCropAndSetWewifiPic function in Shenzhen Tenda Technology Co., Ltd Tenda G0 v15.11.0.5.
Official resources
-
CVE-2026-36796 CVE record
CVE.org
-
CVE-2026-36796 NVD detail
NVD
-
Source item URL
nvd_modified
- Source reference
CVE-2026-36796 was published on [2026-06-09T19:17:45.030Z](https://www.cve.org/CVERecord?id=CVE-2026-36796) and modified on [2026-06-10T20:16:52.037Z](https://nvd.nist.gov/vuln/detail/CVE-2026-36796).