CVE-2026-3973 | Tenda W3 1.0.0.3(2204) POST Parameter /goform/setAutoPing formSetAutoPing ping1/ping2 stack-based overflow

A vulnerability, which was classified as critical, has been found in Tenda W3 1.0.0.3(2204). This affects the function formSetAutoPing of the file /goform/setAutoPing of the component POST Parameter Handler. This manipulation of the argument ping1/ping2 causes stack-based buffer overflow.

This vulnerability is tracked as CVE-2026-3973. The attack is possible to be carried out remotely. Moreover, an exploit is present.