Home / Vulnerability Intelligence / CVE-2026-3811

CVE-2026-3811 - Vulnerability Analysis

HighCVSS: 8.8

Last Updated: March 9, 2026

Tenda FH1202 - Buffer Overflow

Published: March 9, 2026Updated: March 9, 2026PoC AvailableRemote Exploitable

Overview

Tenda FH1202 1.2.0.14(408) contains a stack-based buffer overflow caused by manipulation of the "page" argument in /goform/P2pListFilter, letting remote attackers execute arbitrary code, exploit requires no special privileges.

Severity & Score

Severity: High

CVSS Score: 8.8

EPSS Score: 7.6%(Probability of exploitation in next 30 days)

Impact

Remote attackers can execute arbitrary code, potentially leading to full system compromise.

Mitigation

Update to the latest version.

References

Social Media Activity(2 posts)

TheHackerWire

@thehackerwire

Mar 9, 2026

🟠 CVE-2026-3811 - High (8.8) A vulnerability was found in Tenda FH1202 1.2.0.14(408). This impacts the function fromP2pListFilter of the file /goform/P2pListFilter. The manipulation of the argument page results in stack-based buffer overflow. The attack can be executed remote... 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-3811/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Offensive Sequence

@offseq

Mar 9, 2026

⚠️ HIGH severity: Tenda FH1202 (1.2.0.14) vulnerable to stack-based buffer overflow (CVE-2026-3811). Remote exploit is public. No fix yet — monitor, isolate, and watch for updates. https://radar.offseq.com/threat/cve-2026-3811-stack-based-buffer-overflow-in-tenda-076e8a7e #OffSeq #Vulnerability #IoTSecurity #CVE20263811

View original post

Related Resources

Details

CVE ID: CVE-2026-3811
Severity: High
CVSS Score: 8.8
Type: buffer_overflow
Status: confirmed
EPSS: 7.6%
Social Posts: 2

CWE

CWE-119

CVSS Metrics

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Score

7.6%Probability of exploitation in the next 30 days