CVE-2026-3801 | Tenda i3 1.0.0.6(2204) /goform/setAutoPing formSetAutoPing ping1/ping2 stack-based overflow

A vulnerability was found in Tenda i3 1.0.0.6(2204). It has been classified as critical. Affected by this vulnerability is the function formSetAutoPing of the file /goform/setAutoPing. Performing a manipulation of the argument ping1/ping2 results in stack-based buffer overflow.

This vulnerability is reported as CVE-2026-3801. The attack is possible to be carried out remotely. Moreover, an exploit is present.