Tenda 4G06 Router Stack-Based Buffer Overflow Vulnerability (CVE-2026-5036)

hello@craftedsignal.io — Sun, 29 Mar 2026 08:15:56 +0000

A stack-based buffer overflow vulnerability, identified as CVE-2026-5036, affects the Tenda 4G06 router, specifically version 04.06.01.29. The vulnerability resides in the fromDhcpListClient function within the /goform/DhcpListClient endpoint. A remote attacker can exploit this by crafting a malicious request that manipulates the page argument, leading to a buffer overflow on the stack. This could allow the attacker to potentially execute arbitrary code on the device. Given the…

Cve-2026-5036 — CraftedSignal Threat Feed

Tenda 4G06 Router Stack-Based Buffer Overflow Vulnerability (CVE-2026-5036)