CVE-2026-3799Disclosure(tenda / i3)

LOWCVSS 7.4 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A flaw has been found in Tenda i3 1.0.0.6(2204). This impacts the function formSetCfm of the file /goform/setcfm. This manipulation of the argument funcpara1 causes stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been published and may be used.

tenda CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Exploit / PoC references

https://github.com/Svigo-o/Tenda_vul/tree/main/tenda-i3-setcfm-funcpara1-buffer-overflow

Vendor / third-party advisories

Other references

Weakness type (CWE)

CWE-119CWE-121

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

i3
i3_firmware

Threat summary

7 mentions across 4 observed days
Momentum state: stable

What's happening

Technical details provided in 5 signals
Disclosure: 7 classified signals
Peaked 3d ago at 4 mentions (2026-03-09); latest day: 1
7 total mentions across 4 days

Affected systems

Vendors

tenda

Products

i3i3_firmware

2 versions affected across 2 products

Deep dive

Activity timeline7 mentions / 4d

Signal classification1 categories

Disclosure

7100.0%

Referenced assets5 URLs

By indicator

Classification over time

Date	Total	Labels

2026-03-09	4	Disclosure4
2026-03-10	1	Disclosure1
2026-03-12	1	Disclosure1
2026-03-13	1	Disclosure1

Full discourse7 posts

CRAC Learning - Tech@cracbot209d
Disclosure
CVE-2026-3799 (CVSS:7.4, HIGH) is Analyzed. A flaw has been found in Tenda i3 1.0.0.6(2204). This impacts the function formSetCfm of the file /goform/setcfm. This m..https://nvd.nist.gov/vuln/detail/CVE-2026-3799 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The post discloses CVE‑2026‑3799, a high‑CVSS flaw in Tenda i3 routers affecting the formSetCfm function, providing technical details but lacking PoC, exploit, or patch information.
0000025
172 followersView on X
CRAC Learning - Tech@cracbot210d
Disclosure
CVE-2026-3799 (CVSS:7.4, HIGH) is Analyzed. A flaw has been found in Tenda i3 1.0.0.6(2204). This impacts the function formSetCfm of the file /goform/setcfm. This m..https://nvd.nist.gov/vuln/detail/CVE-2026-3799 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The post announces CVE-2026-3799, a high‑severity flaw in Tenda i3 router firmware, giving technical details such as CVSS score and affected function, but offers no proof of concept, exploit, or patch information.
0000018
172 followersView on X
CVEarity@CVEarity212d
Disclosure
⚡ New CVE Alert: CVE-2026-3799 📊 Severity: 8.8 🚨 Risk Level: High 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-3799 #CVE-2026-3799 #CVE #High #CyberSecurity #InfoSec https://t.co/AMgnWHiOKs
Post summary
The tweet announces CVE-2026-3799 with a severity of 8.8 and a high risk level, but provides no technical details, PoC, exploit code, or patch information.
0000017
91 followersView on X
CVE@CVEnew212d
Disclosure
CVE-2026-3799 A flaw has been found in Tenda i3 1.0.0.6(2204). This impacts the function formSetCfm of the file /goform/setcfm. This manipulation of the argument funcpara1 causes sta… https://www.cve.org/CVERecord?id=CVE-2026-3799
Post summary
The tweet announces CVE-2026-3799 as a flaw in Tenda i3 firmware, detailing affected function and argument, but offers no PoC, exploit code, or patch information.
00000140
56.6K followersView on X
RedPacket Security@RedPacketSec213d
Disclosure
CVE Alert: CVE-2026-3799 - Tenda - i3 - https://www.redpacketsecurity.com/cve-alert-cve-2026-3799-tenda-i3/ #OSINT #ThreatIntel #CyberSecurity #cve-2026-3799 #tenda #i3
Post summary
A CVE alert for CVE‑2026‑3799 impacting Tenda i3 devices, linking to a RedPacketSecurity article that presumably contains further details.
00000101
3.5K followersView on X
CyberDudeBivash® | Global Cybersecurity Company@cyberbivash213d
Disclosure
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-3799 - Tenda i3 setcfm formSetCfm stack-based overflow Intel Report: https://ift.tt/IRXpdFa
Post summary
The alert announces CVE-2026-3799, a stack-based buffer overflow in Tenda i3 setcfm, but does not provide a PoC, exploit, or patch, only linking to an Intel report.
0000040
347 followersView on X
CVEFind.com@CveFindCom213d
Disclosure
[CVE-2026-3799: HIGH] Vulnerability discovered in Tenda i3 1.0.0.6(2204) allows remote stack-based buffer overflow through manipulation of arguments, enabling potential cyber attacks.#cve,CVE-2026-3799,#cybersecurity https://cvefind.com/CVE-2026-3799
Post summary
The post announces the discovery of CVE-2026-3799, a high‑severity stack‑based buffer overflow in Tenda i3, providing technical details but no PoC, exploit, or patch information.
0000064
600 followersView on X

CPE platform detail2 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

2 of 2 entries

Part	Vendor	Product	Version	Target SW	Target HW
HW	tenda	i3	-	-	-
OS	tenda	i3_firmware	1.0.0.6\(2204\)	-	-

Explore more

Back to dashboard tenda CVEs i3 vulnerabilities

What researchers are saying

CVE-2026-3799

CRAC Learning - Tech@cracbotDisclosure

The post discloses CVE‑2026‑3799, a high‑CVSS flaw in Tenda i3 routers affecting the formSetCfm function, providing technical details but lacking PoC, exploit, or patch information.

CRAC Learning - Tech@cracbotDisclosure

The post announces CVE-2026-3799, a high‑severity flaw in Tenda i3 router firmware, giving technical details such as CVSS score and affected function, but offers no proof of concept, exploit, or patch information.

CVEarity@CVEarityDisclosure

The tweet announces CVE-2026-3799 with a severity of 8.8 and a high risk level, but provides no technical details, PoC, exploit code, or patch information.

CVE@CVEnewDisclosure

The tweet announces CVE-2026-3799 as a flaw in Tenda i3 firmware, detailing affected function and argument, but offers no PoC, exploit code, or patch information.

RedPacket Security@RedPacketSecDisclosure

A CVE alert for CVE‑2026‑3799 impacting Tenda i3 devices, linking to a RedPacketSecurity article that presumably contains further details.

CyberDudeBivash® | Global Cybersecurity Company@cyberbivashDisclosure

The alert announces CVE-2026-3799, a stack-based buffer overflow in Tenda i3 setcfm, but does not provide a PoC, exploit, or patch, only linking to an Intel report.

CVEFind.com@CveFindComDisclosure

The post announces the discovery of CVE-2026-3799, a high‑severity stack‑based buffer overflow in Tenda i3, providing technical details but no PoC, exploit, or patch information.