<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: ax1803 firmware</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2026-1329: A flaw has been found in Tenda AX1803 1.0.0.1</title><link>https://patchthecve.com/cve/CVE-2026-1329.html</link><guid>https://patchthecve.com/cve/CVE-2026-1329.html</guid><pubDate>Wed, 17 Jun 2026 10:15:36 +0000</pubDate><description>HIGH 8.8: A flaw has been found in Tenda AX1803 1.0.0.1. The affected element is the function fromGetWifiGuestBasic of the file /goform/WifiGuestSet. Executing a manipulation of the argument guestWrlPwd/guestEn/guestSsid/hideSsid/guestSecurity can lead to stack-based buffer overflow. The attack may be launche</description></item><item><title>CVE-2025-70648: Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow in the security_5g parameter of the sub_727F4</title><link>https://patchthecve.com/cve/CVE-2025-70648.html</link><guid>https://patchthecve.com/cve/CVE-2025-70648.html</guid><pubDate>Wed, 17 Jun 2026 10:03:21 +0000</pubDate><description>HIGH 7.5: Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow in the security_5g parameter of the sub_727F4 function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.</description></item><item><title>CVE-2025-70646: Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow in the security parameter of the sub_72290 fu</title><link>https://patchthecve.com/cve/CVE-2025-70646.html</link><guid>https://patchthecve.com/cve/CVE-2025-70646.html</guid><pubDate>Wed, 17 Jun 2026 10:03:21 +0000</pubDate><description>HIGH 7.5: Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow in the security parameter of the sub_72290 function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.</description></item><item><title>CVE-2025-70651: Tenda AX-1803 v1.0.0.1 was discovered to contain a stack overflow in the ssid parameter of the form_fast_setti</title><link>https://patchthecve.com/cve/CVE-2025-70651.html</link><guid>https://patchthecve.com/cve/CVE-2025-70651.html</guid><pubDate>Wed, 17 Jun 2026 10:03:21 +0000</pubDate><description>HIGH 7.5: Tenda AX-1803 v1.0.0.1 was discovered to contain a stack overflow in the ssid parameter of the form_fast_setting_wifi_set function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.</description></item><item><title>CVE-2025-63457: Tenda AX-1803 v1.0.0.1 was discovered to contain a stack overflow via the wanMTU parameter in the sub_4F55C fu</title><link>https://patchthecve.com/cve/CVE-2025-63457.html</link><guid>https://patchthecve.com/cve/CVE-2025-63457.html</guid><pubDate>Wed, 17 Jun 2026 09:53:10 +0000</pubDate><description>HIGH 7.5: Tenda AX-1803 v1.0.0.1 was discovered to contain a stack overflow via the wanMTU parameter in the sub_4F55C function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.</description></item><item><title>CVE-2025-63456: Tenda AX-1803 v1.0.0.1 was discovered to contain a stack overflow via the time parameter in the SetSysTimeCfg </title><link>https://patchthecve.com/cve/CVE-2025-63456.html</link><guid>https://patchthecve.com/cve/CVE-2025-63456.html</guid><pubDate>Wed, 17 Jun 2026 09:53:10 +0000</pubDate><description>HIGH 7.5: Tenda AX-1803 v1.0.0.1 was discovered to contain a stack overflow via the time parameter in the SetSysTimeCfg function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.</description></item><item><title>CVE-2025-63458: Tenda AX-1803 v1.0.0.1 was discovered to contain a stack overflow via the timeZone parameter in the form_fast_</title><link>https://patchthecve.com/cve/CVE-2025-63458.html</link><guid>https://patchthecve.com/cve/CVE-2025-63458.html</guid><pubDate>Wed, 17 Jun 2026 09:53:10 +0000</pubDate><description>HIGH 7.5: Tenda AX-1803 v1.0.0.1 was discovered to contain a stack overflow via the timeZone parameter in the form_fast_setting_wifi_set function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.</description></item><item><title>CVE-2025-7598: A vulnerability classified as critical was found in Tenda AX1803 1.0.0.1</title><link>https://patchthecve.com/cve/CVE-2025-7598.html</link><guid>https://patchthecve.com/cve/CVE-2025-7598.html</guid><pubDate>Wed, 17 Jun 2026 10:05:18 +0000</pubDate><description>HIGH 8.8: A vulnerability classified as critical was found in Tenda AX1803 1.0.0.1. Affected by this vulnerability is the function formSetWifiMacFilterCfg of the file /goform/setWifiFilterCfg. The manipulation of the argument deviceList leads to stack-based buffer overflow. The attack can be launched remotely</description></item><item><title>CVE-2025-7597: A vulnerability classified as critical has been found in Tenda AX1803 1.0.0.1</title><link>https://patchthecve.com/cve/CVE-2025-7597.html</link><guid>https://patchthecve.com/cve/CVE-2025-7597.html</guid><pubDate>Wed, 17 Jun 2026 10:05:18 +0000</pubDate><description>HIGH 8.8: A vulnerability classified as critical has been found in Tenda AX1803 1.0.0.1. Affected is the function formSetMacFilterCfg of the file /goform/setMacFilterCfg. The manipulation of the argument deviceList leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit</description></item></channel></rss>