Tenda BE3L Pro: Buffer overflow in formWifiBasicSet via security_5g
Summary
A buffer overflow in the web management function formWifiBasicSet (/goform/WifiBasicSet) of the Tenda BE3L Pro router, firmware 16.03.60.62, is caused by an unchecked strcpy call on the security_5g parameter. An attacker who can reach the web interface can send an oversized value to crash the web server, and possibly execute code on the device. The supplied CVSS 4.0 vector requires low privileges (PR:L), while the VulDB description suggests no authentication is needed; this conflict is unresolved. A public proof of concept exists.
Affected
- Tenda BE3L Pro, firmware version 16.03.60.62 (the only build confirmed in the sources)
Fixed in
Unknown. No fixed firmware has been confirmed. Check https://www.tendacn.com/download for a newer BE3L Pro build.
Workaround
- No vendor workaround published.
- Disable remote (WAN) administration and port forwarding to the web interface.
- Check that UPnP is disabled.
- Change the default admin password and restrict LAN access to the admin page.
Exploitation
- Public proof of concept: yes (VulDB lists status Proof-of-Concept).
- Not known to be exploited in the wild; not in the CISA KEV catalogue.
- EPSS 0.00511 (Vulners).
Our recommendation
- Inventory all Tenda BE3L Pro devices and confirm the firmware version.
- Check whether the admin interface is reachable from the internet or from untrusted LAN segments; if so, prioritise this device.
- Apply the interim hardening measures and monitor for fixed firmware.
- Plan a replacement if no fixed firmware is released.
Public exploits
PoC-in-GitHub, Metasploit and Exploit-DB list nothing for this CVE.
Research sources
- VulDB CVE-2026-114268 vuldb.com
- VulDB entry 424700 vuldb.com
- GitHub Tmzop/Tenda-CVE github.com
- Tenda website www.tenda.com.cn
- Tenda download center www.tendacn.com
- HOL Guard CVE-2026-114268 hol.org
- Vulners NVD:CVE-2026-114268 vulners.com
- OpenCVE CVE-2026-114268 app.opencve.io
Researched and written up in English and German by an AI (Claude by Anthropic) based on NVD, CISA, EPSS and the sources listed. The vendor information is authoritative. Researched on 1 Nov 2026, 07:21.
Original description (NVD)
A flaw has been found in Tenda BE3L Pro 16.03.60.62. Affected by this vulnerability is the function formWifiBasicSet of the file /goform/WifiBasicSet. This manipulation of the argument security_5g causes buffer overflow. It is possible to initiate the attack remotely. The exploit has been published and may be used.
Sources
The tracker combines official, freely usable data sources – updated continuously:
- NVD (NIST) – CVEs, rating (CVSS), affected products
- CISA KEV – vulnerabilities confirmed by CISA as actively exploited
- CISA Vulnrichment – CISA assessment (SSVC) in the official CVE record
- FIRST EPSS – probability of exploitation
- Microsoft MSRC – Patch Tuesday: vulnerabilities, severity, updates
- PoC-in-GitHub – public proof-of-concept repositories
- Metasploit (Rapid7) – modules of the Metasploit Framework
- Exploit-DB (OffSec) – archive of public exploits (links only)
- Patch days: official vendor pages (linked per vendor) (Vendor patch days)
This product uses data from the NVD API but is not endorsed or certified by the NVD. EPSS data © FIRST.org.
Affected? We can help.
We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.