CVE-2026-36800 describes a buffer overflow vulnerability in the IPMacBindIndex parameter of the formIPMacBindDel function in Tenda G0 firmware version 15.11.0.5. Exploitation requires no privileges or user interaction and can be triggered remotely over the network via a crafted HTTP request, resulting in a denial of service condition. The vulnerability is categorized under CWE-120 (Classic Buffer Overflow). There is no vendor advisory or patch available at this time, and no known exploits have been reported in the wild.

Successful exploitation of this vulnerability results in a denial of service (DoS) condition, causing the affected device to become unresponsive or crash. There is no indication of confidentiality or integrity impact. The attack vector is network-based and requires no authentication.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, consider limiting network exposure of the affected device and monitoring for unusual HTTP requests targeting the IPMacBindDel function. Avoid exposing the device's management interface to untrusted networks.