Tenda RX3 Firmware vulnerabilities

17 CVEs affecting Tenda RX3 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-2187, published 2026-02-08.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-4357, published 2025-05-06. Critical severity, CVSS 9.8. EPSS: 15.8% chance of exploitation in the next 30 days. A vulnerability was found in Tenda RX3 16.03.13.11_multi. It has been rated as critical. This issue affects some unknown processing of the file /goform/telnet. The manipulation leads to command…
CVE-2025-5527, published 2025-06-03. High severity, CVSS 8.8. EPSS: 12.1% chance of exploitation in the next 30 days. A vulnerability was found in Tenda RX3 16.03.13.11_multi_TDE01. It has been rated as critical. This issue affects the function save_staticroute_data of the file /goform/SetStaticRouteCfg. The…
CVE-2025-3259, published 2025-04-04. High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days. A vulnerability, which was classified as critical, has been found in Tenda RX3 16.03.13.11. This issue affects the function formSetDeviceName of the file /goform/SetOnlineDevName. The manipulation of…
CVE-2026-2187, published 2026-02-08. High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days. A vulnerability was found in Tenda RX3 16.03.13.11. The affected element is the function set_qosMib_list of the file /goform/formSetQosBand. Performing a manipulation of the argument list results in…
CVE-2026-2186, published 2026-02-08. High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days. A vulnerability has been found in Tenda RX3 16.03.13.11. Impacted is the function fromSetIpMacBind of the file /goform/SetIpMacBind. Such manipulation of the argument list leads to stack-based buffer…
CVE-2025-29361, published 2025-03-13. High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days. Tenda RX3 US_RX3V1.0br_V16.03.13.11_multi_TDE01 is vulnerable to Buffer Overflow via the list parameter at /goform/SetVirtualServerCfg. This vulnerability allows attackers to cause a Denial of…
CVE-2025-29358, published 2025-03-13. High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days. Tenda RX3 US_RX3V1.0br_V16.03.13.11_multi_TDE01 is vulnerable to Buffer Overflow via the firewallEn parameter at /goform/SetFirewallCfg. This vulnerability allows attackers to cause a Denial of…
CVE-2026-2185, published 2026-02-08. High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days. A flaw has been found in Tenda RX3 16.03.13.11. This issue affects the function set_device_name of the file /goform/setBlackRule of the component MAC Filtering Configuration Endpoint. This…
CVE-2026-2181, published 2026-02-08. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. A security flaw has been discovered in Tenda RX3 16.03.13.11. Affected by this vulnerability is an unknown functionality of the file /goform/openSchedWifi. Performing a manipulation of the argument…
CVE-2026-2180, published 2026-02-08. High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability was identified in Tenda RX3 16.03.13.11. Affected is an unknown function of the file /goform/fast_setting_wifi_set. Such manipulation of the argument ssid_5g leads to stack-based…

Latest

CVE-2025-44899, published 2025-05-06. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. There is a stack overflow vulnerability in Tenda RX3 V1.0br_V16.03.13.11 In the fromSetWifiGusetBasic function of the web url /goform/ WifiGuestSet, the manipulation of the parameter shareSpeed leads…
CVE-2025-44900, published 2025-05-06. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. In Tenda RX3 V1.0br_V16.03.13.11 in the GetParentControlInfo function of the web url /goform/GetParentControlInfo, the manipulation of the parameter mac leads to stack overflow.