Description
Tenda AX3 firmware v16.03.12.11 contains a stack-based buffer overflow in the formGetIptv function due to improper handling of the citytag stack buffer, which may result in memory corruption and remote code execution.
Critical · 9.8
CVE-2025-69766
EUVD-2026-3647GHSA-2w96-8922-g8xr
Tenda AX3 firmware v16.03.12.11 contains a stack-based buffer overflow in the formGetIptv function due to improper handling of the citytag …
Published Jan 21, 2026 · Updated Jan 22, 2026 · Assigned by mitre