CVE-2026-114268
A flaw has been found in Tenda BE3L Pro 16.03.60.62
- Risk score
- 68/100
- CVSS
- 9.9 v3.1
- Exploit chance (30 days)
- 0.5%
- Published
- 21 Oct 2026
Open in the live forecast Today's forecast
What to know
- What it is
- A buffer overflow vulnerability exists in the function formWifiBasicSet of the file /goform/WifiBasicSet in Tenda BE3L Pro 16.03.60.62, allowing remote attacks. An attacker could exploit this to gain control, initiate the attack remotely.
- Affected
- {'products': ['Tenda BE3L Pro'], 'packages': [], 'versions': ['16.03.60.62']}
- Fix
- Check the linked advisory for a fix
- Exploitation
- Public proof of concept
Why it is Amber
- CVSS 9.9 critical
References
Original description
A flaw has been found in Tenda BE3L Pro 16.03.60.62. Affected by this vulnerability is the function formWifiBasicSet of the file /goform/WifiBasicSet. This manipulation of the argument security_5g causes buffer overflow. It is possible to initiate the attack remotely. The exploit has been published and may be used.
Last activity 21 Oct 2026. Patch Forecast updates every hour.