CVE-2026-3976 | Tenda W3 1.0.0.3(2204) POST Parameter /goform/WifiMacFilterSet formWifiMacFilterSet index stack-based overflow

A vulnerability was found in Tenda W3 1.0.0.3(2204) and classified as critical. Impacted is the function formWifiMacFilterSet of the file /goform/WifiMacFilterSet of the component POST Parameter Handler. Executing a manipulation of the argument index can lead to stack-based buffer overflow.

This vulnerability is registered as CVE-2026-3976. It is possible to launch the attack remotely. Furthermore, an exploit is available.