Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability was found in Tenda RX3 16.03.13.11. The affected element is the function set_qosMib_list of the file /goform/formSetQosBand. Performing a manipulation of the argument list results in stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been made public and could be used.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 2 products
CVE-2026-2187 A vulnerability was found in Tenda RX3 16.03.13.11. The affected element is the function set_qosMib_list of the file /goform/formSetQosBand. Performing a manipulation o… https://www.cve.org/CVERecord?id=CVE-2026-2187
Post summary
The text announces CVE-2026-2187 affecting the Tenda RX3 router, identifies the vulnerable function, but provides no proof‑of‑concept, exploit, or patch details.
[CVE-2026-2187: HIGH] Stack-based buffer overflow vulnerability discovered in Tenda RX3 16.03.13.11 allows remote attacks via manipulation of arguments in set_qosMib_list function of /goform/formSetQosBand fil...#cve,CVE-2026-2187,#cybersecurity https://cvefind.com/CVE-2026-2187
Post summary
The tweet announces a high‑severity stack‑based buffer overflow in Tenda RX3 firmware that could allow remote attackers to manipulate QoS parameters; no PoC, exploit code, patch, or active exploitation is reported.
We have just added an important vulnerability affecting Tenda RX3 (CVE-2026-2187) https://vuldb.com/?id.344890
Post summary
A new vulnerability (CVE-2026-2187) affecting the Tenda RX3 has been added to a vulnerability database, but no further details are provided.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | tenda | rx3 | - | - | - |
| OS | tenda | rx3_firmware | 16.03.13.11 | - | - |