Live › vulnerability › CVE-2026-114268
Go to dashboardThe Tenda BE3L Pro router firmware version 16.03.60.62 has a buffer overflow in the web handler formWifiBasicSet at /goform/WifiBasicSet, triggered by the security_5g argument. A remote attacker can send a crafted request to overflow memory, and a public exploit has been published.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Tenda BE3L Pro | firmware | = 16.03.60.62 | – |
Check the firmware version under the router admin page or system info; 16.03.60.62 is affected.
No fixed version is named in the sources; check the Tenda support site for a newer firmware.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A flaw has been found in Tenda BE3L Pro 16.03.60.62. Affected by this vulnerability is the function formWifiBasicSet of the file /goform/WifiBasicSet. This manipulation of the argument security_5g causes buffer overflow. It is possible to initiate the attack remotely. The exploit has been published and may be used.
This page as .md · .json · in your agent: get_signal("CVE-2026-114268")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.