---
id: CVE-2026-114268
title: Tenda BE3L Pro WifiBasicSet formWifiBasicSet buffer overflow
summary: >-
  A flaw has been found in Tenda BE3L Pro 16.03.60.62. Affected by this
  vulnerability is the function formWifiBasicSet of the file
  /goform/WifiBasicSet. This manipulation of the argument security_5g causes
  buffer overflow. It is possible t…
severity: critical
cvss: 9.9
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R'
cvssSource: cna
cwe:
  - CWE-120
  - CWE-119
vendor: Tenda
product: BE3L Pro
affected:
  - be3l_pro 16.03.60.62
published: '2026-10-21'
updated: '2026-10-21'
sourceUpdated: '2026-10-21T18:45:12.143Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-114268'
references:
  - url: 'https://vuldb.com/vuln/424700'
    label: VDB-424700 | Tenda BE3L Pro WifiBasicSet formWifiBasicSet buffer overflow
  - url: 'https://vuldb.com/vuln/424700/cti'
    label: 'VDB-424700 | CTI Indicators (IOB, IOC, IOA)'
  - url: 'https://vuldb.com/cve/CVE-2026-114268'
    label: CVE-2026-114268 | CVE Analysis and Report
  - url: 'https://vuldb.com/submit/1018994'
    label: >-
      Submit #1018994 | Tenda Tenda Router BE3L Pro V16.03.60.62 Stack-based
      Buffer Overflow
  - url: 'https://github.com/Tmzop/Tenda-CVE'
  - url: 'https://www.tenda.com.cn/'
tags:
  - cve.org
ingestedAt: '2026-10-21T19:10:31.393Z'
---

## Overview

A flaw has been found in Tenda BE3L Pro 16.03.60.62. Affected by this vulnerability is the function formWifiBasicSet of the file /goform/WifiBasicSet. This manipulation of the argument security_5g causes buffer overflow. It is possible to initiate the attack remotely. The exploit has been published and may be used.

## Affected

- `be3l_pro 16.03.60.62`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.