Tenda BE3L Pro: Buffer overflow in formWifiBasicSet (CVE-2026-114268)
A buffer overflow vulnerability exists in the Tenda BE3L Pro (version 16.03.60.62) within the formWifiBasicSet function of the /goform/WifiBasicSet file. The flaw is triggered via the security_5g argument and can be initiated remotely.
CVE search metadata
CVE search record: CVE-2026-114268. Severity: critical. CVSS: 9.9. KEV: no. Product: BE3L Pro (16.03.60.62). Brief: Tenda BE3L Pro: Buffer overflow in formWifiBasicSet (CVE-2026-114268). Brief link: https://feed.craftedsignal.io/briefs/2026-10-tenda-be3l-pro-buffer-overflow/
Triage facts
Revision 1- Applicability
- BE3L Pro (16.03.60.62)
- Evidence
- Unknown
- Severity
- Critical
- Sources
- 1 public source
- Freshness
- Revision 1Oct 21, 21:37 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A2Roughly even chance
A flaw has been found in Tenda BE3L Pro 16.03.60.62. The function formWifiBasicSet in the file /goform/WifiBasicSet is affected by a buffer overflow vulnerability. This is caused by manipulation of the security_5g argument. The attack can be initiated remotely. An exploit has been published.