CVE-2026-3975 | Tenda W3 1.0.0.3(2204) POST Parameter /goform/WifiMacFilterGet formWifiMacFilterGet wl_radio stack-based overflow

A vulnerability has been found in Tenda W3 1.0.0.3(2204) and classified as critical. This issue affects the function formWifiMacFilterGet of the file /goform/WifiMacFilterGet of the component POST Parameter Handler. Performing a manipulation of the argument wl_radio results in stack-based buffer overflow.

This vulnerability is cataloged as CVE-2026-3975. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.