Tenda i3 Firmware vulnerabilities

8 CVEs affecting Tenda i3 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-5841, published 2026-04-09.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-3971, published 2026-03-12. High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days. A vulnerability has been found in Tenda i3 1.0.0.6(2204). Affected by this vulnerability is the function formwrlSSIDset of the file /goform/wifiSSIDset. The manipulation of the argument index/GO…
CVE-2026-3801, published 2026-03-09. High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days. A vulnerability was found in Tenda i3 1.0.0.6(2204). Affected by this vulnerability is the function formSetAutoPing of the file /goform/setAutoPing. Performing a manipulation of the argument…
CVE-2026-3970, published 2026-03-12. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. A flaw has been found in Tenda i3 1.0.0.6(2204). Affected is the function formwrlSSIDget of the file /goform/wifiSSIDget. Executing a manipulation of the argument index can lead to stack-based buffer…
CVE-2026-3804, published 2026-03-09. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. A security flaw has been discovered in Tenda i3 1.0.0.6(2204). This vulnerability affects the function formWifiMacFilterSet of the file /goform/WifiMacFilterSet. The manipulation of the argument…
CVE-2026-3803, published 2026-03-09. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability was identified in Tenda i3 1.0.0.6(2204). This affects the function formWifiMacFilterGet of the file /goform/WifiMacFilterGet. The manipulation of the argument index leads to…
CVE-2026-3802, published 2026-03-09. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability was determined in Tenda i3 1.0.0.6(2204). Affected by this issue is the function formexeCommand of the file /goform/exeCommand. Executing a manipulation of the argument cmdinput can…
CVE-2026-3799, published 2026-03-09. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. A flaw has been found in Tenda i3 1.0.0.6(2204). This impacts the function formSetCfm of the file /goform/setcfm. This manipulation of the argument funcpara1 causes stack-based buffer overflow.…
CVE-2026-5841, published 2026-04-09. Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days. A weakness has been identified in Tenda i3 1.0.0.6(2204). The affected element is the function R7WebsSecurityHandler of the component HTTP Handler. Executing a manipulation can lead to path…