Tenda w3 Firmware vulnerabilities

7 CVEs affecting Tenda w3 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-4008, published 2026-03-12.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-4008, published 2026-03-12. High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days. A flaw has been found in Tenda W3 1.0.0.3(2204). This issue affects some unknown processing of the file /goform/wifiSSIDset of the component POST Parameter Handler. Executing a manipulation of the…
CVE-2026-3976, published 2026-03-12. High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days. A weakness has been identified in Tenda W3 1.0.0.3(2204). Impacted is the function formWifiMacFilterSet of the file /goform/WifiMacFilterSet of the component POST Parameter Handler. Executing a…
CVE-2026-3973, published 2026-03-12. High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days. A vulnerability was determined in Tenda W3 1.0.0.3(2204). This affects the function formSetAutoPing of the file /goform/setAutoPing of the component POST Parameter Handler. This manipulation of the…
CVE-2026-4007, published 2026-03-12. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability was detected in Tenda W3 1.0.0.3(2204). This vulnerability affects unknown code of the file /goform/wifiSSIDget of the component POST Parameter Handler. Performing a manipulation of…
CVE-2026-3975, published 2026-03-12. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. A security flaw has been discovered in Tenda W3 1.0.0.3(2204). This issue affects the function formWifiMacFilterGet of the file /goform/WifiMacFilterGet of the component POST Parameter Handler.…
CVE-2026-3974, published 2026-03-12. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability was identified in Tenda W3 1.0.0.3(2204). This vulnerability affects the function formexeCommand of the file /goform/exeCommand of the component HTTP Handler. Such manipulation of the…
CVE-2026-3972, published 2026-03-12. High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days. A vulnerability was found in Tenda W3 1.0.0.3(2204). Affected by this issue is the function formSetCfm of the file /goform/setcfm of the component HTTP Handler. The manipulation of the argument…