Remote Buffer Overflow in Tenda Routers Exposes 5GHz Security to Attack

Tenda BE3L Pro routers running firmware version 16.03.60.62 contain a severe security flaw. The vulnerability resides in the WifiBasicSet function, specifically within the handling of the security_5g argument. Attackers can trigger a buffer overflow by manipulating this input. This manipulation causes a buffer overflow in the function formWifiBasicSet of the file /goform/WifiBasicSet. This issue affects organizations relying on this specific router model for network connectivity.

The risk

The National Vulnerability Database rates CVE-2026-114268 as critical, assigning it a CVSS score of 9.4. Another record lists the severity as high with a score of 8.6. The underlying weaknesses are classified as CWE-120 and CWE-119. The flaw allows remote initiation, meaning attackers can initiate the attack remotely. The exploit has been published and may be used. The source material does not describe specific outcomes beyond the buffer overflow and manipulation of the security_5g argument.

Who is exposed

Only Tenda BE3L Pro devices operating on firmware version 16.03.60.62 are confirmed affected by this vulnerability. The source material identifies this specific version as affected. It does not state whether other versions or models are safe or at risk. Organizations using this specific router configuration should verify their firmware status. The exposure is limited to this specific hardware and software combination in the provided records.

Cost and compliance

The source material does not specify financial costs, regulatory penalties, or compliance implications associated with this vulnerability. No data regarding breach notifications, insurance impacts, or legal liabilities is provided in the National Vulnerability Database records. The source material contains no information on operational impact or exploitation status beyond the existence of published code.

What happens next

Managers should audit their network inventory to identify any Tenda BE3L Pro routers running version 16.03.60.62. If affected devices are found, isolate them from the main network until a secure update is available. Monitor network traffic for unusual activity related to the 5GHz band. Contact the vendor for confirmation on patch availability and timelines.

Questions to ask your suppliers

Teams usually need to verify whether the vendor has acknowledged the severity of the flaw and prioritized a fix. Check whether the supplier can provide a timeline for a secure firmware update or a temporary mitigation strategy. Determine who inside the organization needs to be informed about the potential risk to wireless infrastructure. Ask if the supplier has detected any active exploitation attempts in their environment. Ensure that communication channels are open for urgent security updates during this period.

Background: National Vulnerability Database

The National Vulnerability Database is a centralized repository that standardizes information about software weaknesses. It assigns unique identifiers to each flaw, allowing security tools to automatically detect and assess risks in your systems without manual research.

Read the full guide: National Vulnerability Database Explained: How NVD Works for You

What to do and how to stay safe: Tenda

• Verify the firmware version on all Tenda BE3L Pro routers to confirm if they match the affected version 16.03.60.62.
• Isolate affected devices from the production network to prevent remote exploitation until a vendor update is released.
• Monitor network logs for suspicious traffic patterns targeting the 5GHz wireless configuration endpoints.
• Contact the vendor to inquire about the status of a patch and expected release dates for the fix.

Step-by-step guide: Vulnerability Prioritization: Fix What Actually Breaks Your Business

General security guidance from the CloudSec Pulse newsroom. It is not confirmed advice from the organisations named in this story.

Frequently asked questions

Which Tenda router model is affected by CVE-2026-114268?

The Tenda BE3L Pro router running firmware version 16.03.60.62 is affected by this vulnerability.

Can attackers exploit this flaw remotely?

Yes, the vulnerability allows for remote initiation, meaning attackers can initiate the attack remotely.

Is there a patch available for this vulnerability?

The source material does not confirm the availability of a patch or fix for this issue.