A vulnerability has been found in Tenda i3 1.0.0.6(2204) and classified as critical. This impacts the function formSetCfm of the file /goform/setcfm. This manipulation of the argument funcpara1 causes stack-based buffer overflow.

This vulnerability is registered as CVE-2026-3799. Remote exploitation of the attack is possible. Furthermore, an exploit is available.