ZeroDay Findings
Sign inSign up

Findings

CVE-2026-5036

A vulnerability was found in Tenda 4G06 04.06.01.29.

Published Mar 29, 2026 · updated Jun 17, 2026 · tenda 4g06 firmware

A vulnerability was found in Tenda 4G06 04.06.01.29. This vulnerability affects the function fromDhcpListClient of the file /goform/DhcpListClient of the component Endpoint. Performing a manipulation of the argument page results in stack-based buffer overflow. The attack can be initiated remotely. The exploit has been made public and could be used.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Mar 29, 2026 · NIST NVD

    Detected

    A vulnerability was found in Tenda 4G06 04.06.01.29. This vulnerability affects the function fromDhcpListClient of the file /goform/DhcpListClient of the component Endpoint. Performing a manipulation of the argument page results in stack-based buffer overflow. The attack can be initiated remotely. The exploit has been made public and could be used.

  2. Jun 17, 2026 · NIST NVD

    Updated

    A vulnerability was found in Tenda 4G06 04.06.01.29. This vulnerability affects the function fromDhcpListClient of the file /goform/DhcpListClient of the component Endpoint. Performing a manipulation of the argument page results in stack-based buffer overflow. The attack can be initiated remotely. The exploit has been made public and could be used.

Affected

  • cpe tenda/4g06 firmware04.06.01.29

Sources

  • CVE.orgVulnerability recordCVE-2026-5036

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-5036

    A vulnerability was found in Tenda 4G06 04.06.01.29. This vulnerability affects the function fromDhcpListClient of the file /goform/DhcpListClient of the component Endpoint. Performing a manipulation of the argument page results in stack-based buffer overflow. The attack can be i

    nvd.nist.gov

References