Signal is active with 4 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability was found in Tenda W3 1.0.0.3(2204). Affected by this issue is the function formSetCfm of the file /goform/setcfm of the component HTTP Handler. The manipulation of the argument funcpara1 results in stack-based buffer overflow. The attack can only be performed from the local network. The exploit has been made public and could be used.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 2 products
CVE Alert: CVE-2026-3972 - Tenda - W3 - https://www.redpacketsecurity.com/cve-alert-cve-2026-3972-tenda-w3/ #OSINT #ThreatIntel #CyberSecurity #cve-2026-3972 #tenda #w3
Post summary
The post briefly announces CVE-2026-3972 for a Tenda W3 device with a link to a CVE alert page, but offers no technical details, PoC, exploit code, or patch information.
⚡ New CVE Alert: CVE-2026-3972 📊 Severity: 8.8 🚨 Risk Level: High 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-3972 #CVE-2026-3972 #CVE #High #CyberSecurity #InfoSec https://t.co/1i8oa9M4pB
Post summary
The tweet announces a new CVE (CVE-2026-3972) with a severity score and provides a reference link, but offers no further technical or operational details.
CVE-2026-3972 A vulnerability was found in Tenda W3 1.0.0.3(2204). Affected by this issue is the function formSetCfm of the file /goform/setcfm of the component HTTP Handler. The man… https://www.cve.org/CVERecord?id=CVE-2026-3972
Post summary
CVE-2026-3972 is a newly disclosed vulnerability in Tenda W3 firmware, affecting the formSetCfm function of the HTTP Handler.
[CVE-2026-3972: HIGH] Vulnerability in Tenda W3 1.0.0.3(2204) found - stack-based buffer overflow in HTTP Handler component. Attack possible from local network. Exploit public.#cve,CVE-2026-3972,#cybersecurity https://cvefind.com/CVE-2026-3972
Post summary
The post reports a stack-based buffer overflow in Tenda W3 firmware and notes a publicly available exploit, but provides no PoC, patch, or evidence of active exploitation.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | tenda | w3 | - | - | - |
| OS | tenda | w3_firmware | 1.0.0.3\(2204\) | - | - |