CVE-2026-36794 identifies multiple stack overflow vulnerabilities in the R7WebsSecurityHandler function of the Tenda W3 Wireless Router version 1.0.0.3(2204). The vulnerabilities are exploitable through crafted HTTP requests manipulating the username and password parameters, resulting in a denial of service condition. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges or user interaction required, and impact limited to availability. No known exploits are reported in the wild, and no vendor remediation or patch information is available at this time.

Successful exploitation causes denial of service by crashing or destabilizing the affected router through stack overflow conditions. There is no reported impact on confidentiality or integrity. The router becomes unavailable to legitimate users until restarted or otherwise recovered.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, network administrators should consider isolating affected devices from untrusted networks and monitor for unusual HTTP requests targeting authentication parameters. No official fix or workaround has been published by the vendor as of now.